Search CVEs, research… / diras.sa

UPDATED SEP 30, 2026

CVE Radar: latest vulnerabilities, exploited CVEs and patches

A daily, analyst-curated feed of new and actively exploited CVEs, with severity, exploitation status, affected versions and remediation steps for each.

  1. CVE-2026-69595
    Windows Server use-after-free in Services for NFS ONCRPC XDR remote code execution Microsoft Windows Server 2012 ·
    • PATCH AVAILABLE
    CRITICAL 9.8
  2. CVE-2026-69715
    Windows DirectShow out-of-bounds read remote code execution Microsoft Windows 10 Version 1607 ·
    • PATCH AVAILABLE
    CRITICAL 9.8
  3. CVE-2026-69730
    Windows 10 Version 1607 DNS use-after-free remote code execution Microsoft Windows 10 Version 1607 ·
    • PATCH AVAILABLE
    CRITICAL 9.8
  4. CVE-2026-69768
    Windows 10 Version 1607 heap buffer overflow remote code execution Microsoft Windows 10 Version 1607 ·
    • PATCH AVAILABLE
    CRITICAL 9.8
  5. CVE-2026-69769
    Windows HTTP Print Provider heap overflow lets remote attackers run code Microsoft Windows 10 Version 1607 ·
    • PATCH AVAILABLE
    CRITICAL 9.8
  6. CVE-2026-69819
    Windows 10 Version 1607 out-of-bounds write RPC Runtime remote code execution Microsoft Windows 10 Version 1607 ·
    • PATCH AVAILABLE
    CRITICAL 9.8
  7. CVE-2026-69829
    Windows Shell heap overflow remote code execution Microsoft Windows 10 Version 1607 ·
    • PATCH AVAILABLE
    CRITICAL 9.8
  8. CVE-2026-69824
    Windows 10 Version 1607 integer underflow remote code execution Microsoft Windows 10 Version 1607 ·
    • PATCH AVAILABLE
    CRITICAL 9.8
  9. CVE-2026-69845
    Windows DHCP Server heap buffer overflow remote code execution Microsoft Windows 10 Version 1607 ·
    • PATCH AVAILABLE
    CRITICAL 9.8
  10. CVE-2026-69910
    Windows 10 Version 1607 stack-based buffer overflow remote code execution Microsoft Windows 10 Version 1607 ·
    • PATCH AVAILABLE
    CRITICAL 9.8
  11. CVE-2026-70296
    Windows 10 Version 1607 out-of-bounds write in Windows Imaging Component Microsoft Windows 10 Version 1607 ·
    • PATCH AVAILABLE
    CRITICAL 9.8
  12. CVE-2026-72950
    Windows Routing and Remote Access Service remote code execution Microsoft Windows 10 Version 1607 ·
    • PATCH AVAILABLE
    CRITICAL 9.8
  13. CVE-2026-72979
    Windows 10 Version 1607 DHCP Server use-after-free remote code execution Microsoft Windows 10 Version 1607 ·
    • PATCH AVAILABLE
    CRITICAL 9.8
  14. CVE-2026-72982
    Windows 10 Version 1607 Netlogon stack-based buffer overflow remote code execution Microsoft Windows 10 Version 1607 ·
    • PATCH AVAILABLE
    CRITICAL 9.8
  15. CVE-2026-72983
    Windows Internet Connection Sharing use-after-free remote code execution Microsoft Windows 10 Version 1607 ·
    • PATCH AVAILABLE
    CRITICAL 9.8
  16. CVE-2026-73009
    Windows Secure Socket Tunneling Protocol use-after-free remote code execution Microsoft Windows 10 Version 1607 ·
    • PATCH AVAILABLE
    CRITICAL 9.8
  17. CVE-2026-73010
    Windows 10 Version 1809 use-after-free remote code execution Microsoft Windows 10 Version 1809 ·
    • PATCH AVAILABLE
    CRITICAL 9.8
  18. CVE-2026-73025
    Windows iSCSI weak authentication network bypass Microsoft Windows 10 Version 1607 ·
    • PATCH AVAILABLE
    CRITICAL 9.8
  19. CVE-2026-77493
    Windows 10 Version 1607 double-free in Graphics Component allows remote code execution Microsoft Windows 10 Version 1607 ·
    • PATCH AVAILABLE
    CRITICAL 9.8
  20. CVE-2026-78445
    Windows Server Services for NFS use-after-free remote code execution Microsoft Windows Server 2012 ·
    • PATCH AVAILABLE
    CRITICAL 9.8
20 CVEs · page 10 of 23

About CVE Radar

CVE Radar tracks newly published Common Vulnerabilities and Exposures (CVEs) from NVD, the CISA Known Exploited Vulnerabilities catalog and vendor security advisories. Each entry is reviewed by Diras Labs analysts and includes affected versions, exploitation status, remediation guidance and relevance to organizations in Saudi Arabia and the GCC.