CVEs published in January 2026
4,393 vulnerabilities, 438 critical, 16 exploited.
- microsoft windows 10 version 21h2, windows 10 version 22h2, windows 11 version 23h2 +12 more +14 moreWindows Error Reporting Service Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +29 more +31 moreWindows Installer Elevation of Privilege Vulnerability7.8 High
- microsoft windows 11 version 24h2, windows 11 version 25h2, windows server 2025 +3 more +5 moreCapability Access Management Service (camsvc) Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +20 more +22 moreDirectX Graphics Kernel Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +20 more +22 moreLDAP Tampering Vulnerability6.5 Medium
- microsoft windows 11 version 23h2, windows 11 version 24h2, windows 11 version 25h2 +8 more +10 moreWin32k Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +5 more +7 moreWindows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +23 more +25 moreWindows Kernel Memory Elevation of Privilege Vulnerability7.8 High
- microsoft windows 11 version 24h2, windows 11 version 25h2, windows server 2022, 23h2 edition (server core installation) +5 more +7 moreWindows File Explorer Elevation of Privilege Vulnerability7.0 High
- microsoft windows, windows 10 version 1607, windows 10 version 1809 +25 more +27 moreDesktop Window Manager Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +20 more +22 moreWindows Hello Tampering Vulnerability7.7 High
- microsoft windows admin center, windows admin center in azure portal +1 moreWindows Admin Center Elevation of Privilege Vulnerability7.5 High
- microsoft sql server 2022 (gdr), sql server 2022 for x64-based systems (cu 22), sql server 2025 for x64-based systems (gdr) +2 more +4 moreMicrosoft SQL Server Elevation of Privilege Vulnerability7.2 High
- microsoft windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation), windows server 2008 service pack 2 +15 more +17 moreWindows Deployment Services Remote Code Execution Vulnerability7.5 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreSecure Boot Certificate Expiration Security Feature Bypass Vulnerability6.4 Medium
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +16 more +18 moreDynamic Root of Trust for Measurement (DRTM) Information Disclosure Vulnerability4.4 Medium
- hewlett packard enterprise (hpe) instant onUnexpected shutdown in HPE Instant On Access Points after processing specific packets7.5 High
- hewlett packard enterprise (hpe) instant onExposure of VLAN information in unintended network interfaces7.5 High
- imaginationtech ddk, imagination technologies graphics ddk +1 moreGPU DDK - DevmemIntGetReservationData does not ref the PMR it returns7.8 High
- imaginationtech ddk, imagination technologies graphics ddk +1 moreGPU DDK - Reservation::psMappedPMR can change while used by a freelist -> UAF8.8 High
- imaginationtech ddk, imagination technologies graphics ddk +1 moreGPU DDK - Disguised freelist buffers passed to RGXCreateHWRTDataSet can cause arbitrary physical memory writes corrupting memory3.5 Low
- pegasystems pega infinityPega Customer Service Framework versions 8.7.0 through 25.1.0 are affected by a Unrestricted file upload vulnerability, where a privileged user could potentially upload a malicious file.5.3 Medium
- dell supportassist os recoveryDell SupportAssist OS Recovery, versions prior to 5.5.15.1, contain a Creation of Temporary File...7.5 High
- blackberry ltd qnx os for safety, qnx software development platform, blackberry ltd. qnx os for medical +2 moreVulnerability in the QNX Neutrino Kernel impacts the QNX Software Development Platform and QNX OS for Safety6.2 Medium
- fortinet fortios, fortiswitchmanager, fortisase +3 more +5 moreA heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0...7.4 High
- fortinet fortisandboxA Server-Side Request Forgery (SSRF) vulnerability [CWE-918] vulnerability in Fortinet...3.4 Low
- fortinet fortivoiceAn improper limitation of a pathname to a restricted directory ('path traversal') vulnerability...5.7 Medium
- fortinet fortifoneAn exposure of sensitive information to an unauthorized actor [CWE-200] vulnerability in Fortinet...9.3 Critical
- fortinet fortisiemAn improper neutralization of special elements used in an os command ('os command injection')...9.4 Critical
- fortinet forticlientemsAn improper neutralization of special elements used in an SQL command ('SQL Injection')...6.8 Medium
- imaginationtech ddk, imagination technologies graphics ddk +1 moreGPU DDK - GPU Register value contents leaked from secure workloads to non-secure world9.1 Critical
- dell supportassist os recovery,, supportassist os recovery +1 moreDell SupportAssist OS Recovery, versions prior to 5.5.15.1, contain a Creation of Temporary File...6.6 Medium
- netgear rbr750, rbr750 firmware, rbr840 +21 more +23 moreInsufficient input validation in NETGEAR Orbi routers4.8 Medium
- netgear ex2800, ex2800 firmware, ex3110 +5 more +7 morePath traversal vulnerability in Netgear WiFi Range Extenders6.1 Medium
- netgear ex2800, ex2800 firmware, ex3110 +5 more +7 moreAuthentication bypass in NETGEAR WiFi Range Extenders via network adjacent attacks6.1 Medium
- netgear xr1000v2, xr1000v2 firmware +1 moreInsufficient input validation in NETGEAR Nighthawk router XR1000v26.1 Medium
- netgear cbr750, cbr750 firmware, nbr750 +47 more +49 moreAuthentication Bypass in NETGEAR Orbi Devices6.1 Medium
- netgear rbe970, rbe970 firmware, rbe971 +17 more +19 moreInsufficient input validation in NETGEAR Orbi routers1.1 Low
- red hat openshift dev spaces (rhosds) 3.22, openshift dev spaces (rhosds) 3.23, openshift dev spaces (rhosds) 3.24 +2 moreGithub.com/che-incubator/che-code: eclipse che — unauthenticated rce and secret exfiltration via tcp/33339.0 Critical
- linux, linux kernel +1 moreplatform/x86: hp-bioscfg: Fix out-of-bounds array access in ACPI package parsing7.1 High
- linux, linux kernel +1 morewifi: rtlwifi: 8192cu: fix tid out of range in rtl92cu_tx_fill_desc()7.6 High
- linux, linux kernel +1 moredrm/xe/oa: Fix potential UAF in xe_oa_add_config_ioctl()7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreip6_gre: make ip6gre_header() robust5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreipv4: Fix reference count leak when using error routes with nexthop objects5.5 Medium
- linux, linux kernel +1 moreRDMA/core: Check for the presence of LS_NLA_TYPE_DGID correctly5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenet: stmmac: fix the crash issue for zero copy XDP_TX action9.1 Critical
- linux, linux kernel +1 morenet: usb: asix: validate PHY address before use5.5 Medium
- linux, linux kernel +1 moree1000: fix OOB in e1000_tbi_should_accept()9.1 Critical
- linux, linux kernel +1 moreRDMA/bnxt_re: Fix OOB write in bnxt_re_copy_err_stats()7.8 High
- linux, linux kernel +1 moreteam: fix check for port enabled in team_queue_override_port_prio_changed()7.8 High
- Show moreLoading…