🛡️ CVE Vulnerability Database
CVE vulnerabilities with bilingual AI analysis tailored for Saudi Arabia
| CVE ID | Title / Description | Severity | CVSS | Status | Published |
|---|---|---|---|---|---|
| CVE-2026-23674 |
Improper resolution of path equivalence in Windows MapUrlToZone a…
Improper resolution of path equivalence in Windows MapUrlToZone allows an unauthorized attacker to b…
|
HIGH |
7.5
|
✅ | Mar 10, 2026 |
| CVE-2026-24283 |
Heap-based buffer overflow in Windows File Server allows an autho…
Heap-based buffer overflow in Windows File Server allows an authorized attacker to elevate privilege…
|
HIGH |
8.8
|
✅ AI | Mar 10, 2026 |
| CVE-2026-24285 |
Use after free in Windows Win32K allows an authorized attacker to…
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
|
HIGH |
7.0
|
✅ | Mar 10, 2026 |
| CVE-2026-24287 |
External control of file name or path in Windows Kernel allows an…
External control of file name or path in Windows Kernel allows an authorized attacker to elevate pri…
|
HIGH |
7.8
|
✅ | Mar 10, 2026 |
| CVE-2026-24289 |
Use after free in Windows Kernel allows an authorized attacker to…
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
|
HIGH |
7.8
|
✅ | Mar 10, 2026 |
| CVE-2026-24290 |
Improper access control in Windows Projected File System allows a…
Improper access control in Windows Projected File System allows an authorized attacker to elevate pr…
|
HIGH |
7.8
|
✅ | Mar 10, 2026 |
| CVE-2026-24291 |
Incorrect permission assignment for critical resource in Windows …
Incorrect permission assignment for critical resource in Windows Accessibility Infrastructure (ATBro…
|
HIGH |
7.8
|
✅ | Mar 10, 2026 |
| CVE-2026-24292 |
Use after free in Connected Devices Platform Service (Cdpsvc) all…
Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to eleva…
|
HIGH |
7.8
|
✅ | Mar 10, 2026 |
| CVE-2026-24293 |
Null pointer dereference in Windows Ancillary Function Driver for…
Null pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attac…
|
HIGH |
7.8
|
✅ | Mar 10, 2026 |
| CVE-2026-24294 |
Improper authentication in Windows SMB Server allows an authorize…
Improper authentication in Windows SMB Server allows an authorized attacker to elevate privileges lo…
|
HIGH |
7.8
|
✅ | Mar 10, 2026 |
| CVE-2026-24295 |
Concurrent execution using shared resource with improper synchron…
Concurrent execution using shared resource with improper synchronization ('race condition') in Windo…
|
HIGH |
7.0
|
✅ | Mar 10, 2026 |
| CVE-2026-24296 |
Concurrent execution using shared resource with improper synchron…
Concurrent execution using shared resource with improper synchronization ('race condition') in Windo…
|
HIGH |
7.0
|
✅ | Mar 10, 2026 |
| CVE-2026-25165 |
Null pointer dereference in Windows Performance Counters allows a…
Null pointer dereference in Windows Performance Counters allows an authorized attacker to elevate pr…
|
HIGH |
7.8
|
✅ | Mar 10, 2026 |
| CVE-2026-25166 |
Deserialization of untrusted data in Windows System Image Manager…
Deserialization of untrusted data in Windows System Image Manager allows an authorized attacker to e…
|
HIGH |
7.8
|
✅ | Mar 10, 2026 |
| CVE-2026-25167 |
Use after free in Microsoft Brokering File System allows an unaut…
Use after free in Microsoft Brokering File System allows an unauthorized attacker to elevate privile…
|
HIGH |
7.4
|
✅ | Mar 10, 2026 |
| CVE-2026-25170 |
Use after free in Windows Hyper-V allows an authorized attacker t…
Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
|
HIGH |
7.0
|
✅ | Mar 10, 2026 |
| CVE-2026-25171 |
Use after free in Windows Authentication Methods allows an author…
Use after free in Windows Authentication Methods allows an authorized attacker to elevate privileges…
|
HIGH |
7.0
|
✅ | Mar 10, 2026 |
| CVE-2026-25172 |
Integer overflow or wraparound in Windows Routing and Remote Acce…
Integer overflow or wraparound in Windows Routing and Remote Access Service (RRAS) allows an authori…
|
HIGH |
8.0
|
✅ | Mar 10, 2026 |
| CVE-2026-25173 |
Integer overflow or wraparound in Windows Routing and Remote Acce…
Integer overflow or wraparound in Windows Routing and Remote Access Service (RRAS) allows an authori…
|
HIGH |
8.0
|
✅ | Mar 10, 2026 |
| CVE-2026-25174 |
Out-of-bounds read in Windows Extensible File Allocation allows a…
Out-of-bounds read in Windows Extensible File Allocation allows an authorized attacker to elevate pr…
|
HIGH |
7.8
|
✅ | Mar 10, 2026 |
| CVE-2026-25175 |
Out-of-bounds read in Windows NTFS allows an authorized attacker …
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
|
HIGH |
7.8
|
✅ | Mar 10, 2026 |
| CVE-2026-25176 |
Improper access control in Windows Ancillary Function Driver for …
Improper access control in Windows Ancillary Function Driver for WinSock allows an authorized attack…
|
HIGH |
7.8
|
✅ | Mar 10, 2026 |
| CVE-2026-25177 |
Improper restriction of names for files and other resources in Ac…
Improper restriction of names for files and other resources in Active Directory Domain Services allo…
|
HIGH |
8.8
|
✅ AI | Mar 10, 2026 |
| CVE-2026-25178 |
Use after free in Windows Ancillary Function Driver for WinSock a…
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to ele…
|
HIGH |
7.0
|
✅ | Mar 10, 2026 |
| CVE-2026-25179 |
Improper validation of specified type of input in Windows Ancilla…
Improper validation of specified type of input in Windows Ancillary Function Driver for WinSock allo…
|
HIGH |
7.0
|
✅ | Mar 10, 2026 |
🤖 AI Analysis Active
AI analysis includes: Arabic description, Saudi impact assessment, remediation steps, compliance mapping (NCA ECC, SAMA CSF, ISO 27001) and MITRE ATT&CK techniques.
🔴 Recent Critical CVEs
CVE-2026-20133
Apr 20, 2026
CVE-2026-20128
Apr 20, 2026
CVE-2026-20122
Apr 20, 2026
CVE-2025-48700
Apr 20, 2026
CVE-2025-32975
Apr 20, 2026
💡 Search Tips
CVE-2024-12345
Search by exact ID
apache
Search by product name
remote code execution
Search by vulnerability type
log4j
Search by common name
📡 Data Sources
NVD (NIST) · CIRCL
CISA KEV · ThreatFox
Feodo Tracker · AlienVault OTX
Auto-updated daily via cron