Zero Day Monitor

Zero Day Monitor

106255

New CVEs

128

Critical

56

Pre-CVE

1488

CISA KEV

1035

Articles

39/55

Feeds

Vulnerabilities

microsoft · CVE-2026-21510 — Protection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.KEV

windows_10_1607· CVSS 8.8· CWE-693

microsoft · CVE-2026-21519 — Access of resource using incompatible type ('type confusion') in Desktop Window Manager allows an authorized attacker to elevate privileges locally.KEV

windows_10_1607· CVSS 7.8· CWE-843

microsoft · CVE-2026-21533 — Improper privilege management in Windows Remote Desktop allows an authorized attacker to elevate privileges locally.KEV

windows_10_1607· CVSS 7.8· CWE-269

microsoft · CVE-2026-21514 — Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally.KEV

365_apps· CVSS 7.8· CWE-807

microsoft · CVE-2026-21513 — Protection mechanism failure in MSHTML Framework allows an unauthorized attacker to bypass a security feature over a network.KEV

windows_10_1607· CVSS 8.8· CWE-693

microsoft · CVE-2026-21525 — Null pointer dereference in Windows Remote Access Connection Manager allows an unauthorized attacker to deny service locally.KEV

windows_10_1607· CVSS 6.2· CWE-476

microsoft · CVE-2026-20805 — Exposure of sensitive information to an unauthorized actor in Desktop Windows Manager allows an authorized attacker to disclose information locally.KEV

windows_10_1607· CVSS 5.5· CWE-200

google · CVE-2026-3910 — Inappropriate implementation in V8 in Google Chrome prior to 146.0.7680.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: HiKEV

chrome· CVSS 8.8· CWE-94

google · CVE-2026-3909 — Out of bounds write in Skia in Google Chrome prior to 146.0.7680.75 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)KEV

chrome· CVSS 8.8· CWE-787

microsoft · CVE-2026-20963 — Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.KEV

sharepoint_server· CVSS 8.8· CWE-502

→ View full list

Urgent

langflow langflow

Sharp Corporation home 5G HR01

go github.com/nats-io/nats-server/v2

go github.com/nats-io/nats-server/v2

go github.com/nats-io/nats-server/v2