Browse All CVEs
33,067 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-67648 |
medium | 6.5 | 0.0100 | 2026-10-30 | Use of uninitialized resource in SQL Server allows an authorized attacker to disclose info | |
CVE-2026-67641 |
medium | 6.5 | 0.0114 | 2026-10-30 | Integer overflow or wraparound in SQL Server allows an authorized attacker to deny service | |
CVE-2026-67642 |
high | 8.8 | 0.0091 | 2026-10-30 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code ove | |
CVE-2026-67638 |
high | 8.8 | 0.0091 | 2026-10-30 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code ove | |
CVE-2026-67639 |
high | 8.8 | 0.0091 | 2026-10-30 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code ove | |
CVE-2026-67636 |
critical | 9.0 | 0.0071 | 2026-10-30 | Out-of-bounds read in SQL Server allows an unauthorized attacker to execute code over a ne | |
CVE-2026-67390 |
medium | 6.5 | 0.0100 | 2026-10-30 | Buffer over-read in SQL Server allows an authorized attacker to disclose information over | |
CVE-2026-67393 |
medium | 6.5 | 0.0100 | 2026-10-30 | Buffer over-read in SQL Server allows an authorized attacker to disclose information over | |
CVE-2026-67388 |
high | 8.8 | 0.0091 | 2026-10-30 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code ove | |
CVE-2026-67389 |
medium | 6.5 | 0.0100 | 2026-10-30 | Out-of-bounds read in SQL Server allows an authorized attacker to disclose information ove | |
CVE-2026-67385 |
high | 8.8 | 0.0091 | 2026-10-30 | Use after free in SQL Server allows an authorized attacker to execute code over a network. | |
CVE-2026-67386 |
medium | 6.5 | 0.0100 | 2026-10-30 | Use of uninitialized resource in SQL Server allows an authorized attacker to disclose info | |
CVE-2026-67383 |
medium | 6.5 | 0.0100 | 2026-10-30 | Generation of error message containing sensitive information in SQL Server allows an autho | |
CVE-2026-67384 |
high | 8.8 | 0.0091 | 2026-10-30 | Integer overflow or wraparound in SQL Server allows an authorized attacker to execute code | |
CVE-2026-67380 |
high | 8.8 | 0.0091 | 2026-10-30 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code ove | |
CVE-2026-67381 |
high | 8.8 | 0.0091 | 2026-10-30 | Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileg | |
CVE-2026-67378 |
critical | 9.0 | 0.0071 | 2026-10-30 | Untrusted pointer dereference in SQL Server allows an unauthorized attacker to execute cod | |
CVE-2026-67379 |
high | 8.5 | 0.0066 | 2026-10-30 | Stack-based buffer overflow in SQL Server allows an authorized attacker to execute code ov | |
CVE-2026-67376 |
high | 7.5 | 0.0117 | 2026-10-30 | Integer overflow or wraparound in SQL Server allows an unauthorized attacker to deny servi | |
CVE-2026-66818 |
high | 8.8 | 0.0078 | 2026-10-30 | Improper privilege management in SQL Server allows an authorized attacker to elevate privi | |
CVE-2026-66820 |
high | 8.8 | 0.0099 | 2026-10-30 | Improper neutralization of special elements used in an sql command ('sql injection') in SQ | |
CVE-2026-66814 |
high | 8.8 | 0.0078 | 2026-10-30 | Insufficient granularity of access control in SQL Server allows an authorized attacker to | |
CVE-2026-66816 |
medium | 6.5 | 0.0100 | 2026-10-30 | Insufficient logging in SQL Server allows an authorized attacker to bypass a security feat | |
CVE-2026-66305 |
high | 7.1 | 0.0053 | 2026-10-30 | Use of client-side authentication in Skype for Business allows an authorized attacker to p | |
CVE-2026-65669 |
critical | 9.6 | 0.0086 | 2026-10-30 | Improper neutralization of special elements in output used by a downstream component ('inj | |
CVE-2026-63523 |
medium | 6.5 | 0.0055 | 2026-10-30 | Improper neutralization of input during web page generation ('cross-site scripting') in Sk | |
CVE-2026-62813 |
high | 7.5 | 0.0066 | 2026-10-30 | Use after free in Active Directory Domain Services allows an authorized attacker to execut | |
CVE-2026-62801 |
medium | 6.5 | 0.0076 | 2026-10-30 | Improper limitation of a pathname to a restricted directory ('path traversal') in Windows | |
CVE-2026-62810 |
high | 7.8 | 0.0033 | 2026-10-30 | Heap-based buffer overflow in Active Directory Certificate Services (AD CS) allows an auth | |
CVE-2026-62759 |
high | 7.5 | 0.0038 | 2026-10-30 | Authentication bypass by spoofing in Windows Netlogon allows an unauthorized attacker to p | |
CVE-2026-62762 |
medium | 6.5 | 0.0114 | 2026-10-30 | Null pointer dereference in Active Directory Domain Services allows an authorized attacker | |
CVE-2026-62697 |
high | 7.8 | 0.0033 | 2026-10-30 | Use after free in Windows Push Notifications allows an authorized attacker to elevate priv | |
CVE-2026-58611 |
high | 7.8 | 0.0031 | 2026-10-30 | Improper authorization in XBox Gaming Services allows an authorized attacker to elevate pr | |
CVE-2026-58600 |
high | 7.8 | 0.0047 | 2026-10-30 | Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized atta | |
CVE-2026-56177 |
high | 7.8 | 0.0033 | 2026-10-30 | Use after free in Windows Server allows an authorized attacker to elevate privileges local | |
CVE-2026-56198 |
high | 7.8 | 0.0033 | 2026-10-30 | Out-of-bounds read in Microsoft Trace Data Helper allows an authorized attacker to elevate | |
CVE-2026-56172 |
high | 7.8 | 0.0033 | 2026-10-30 | Use after free in Windows VHD miniport driver allows an authorized attacker to elevate pri | |
CVE-2026-55007 |
high | 8.1 | 0.0071 | 2026-10-30 | Double free in Microsoft Exchange Server allows an unauthorized attacker to execute code o | |
CVE-2026-63184 |
high | 7.1 | — | 2026-10-30 | Refitter is a tool for generating a C# REST API client using the Refit library. Prior to 2 | |
CVE-2026-85893 |
high | 8.8 | 0.0082 | 2026-10-30 | Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execu | |
CVE-2026-88097 |
high | 8.1 | 0.0026 | 2026-10-30 | Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to eleva | |
CVE-2026-85878 |
critical | 9.9 | 0.0078 | 2026-10-30 | Improper authorization in Azure Database for PostgreSQL allows an authorized attacker to e | |
CVE-2026-85887 |
high | 7.7 | 0.0084 | 2026-10-30 | Incorrect permission assignment for critical resource in M365 Copilot allows an authorized | |
CVE-2026-84003 |
high | 7.4 | 0.0060 | 2026-10-30 | Authentication bypass by capture-replay in Microsoft Authentication Library (MSAL) for Nod | |
CVE-2026-85875 |
medium | 5.5 | 0.0054 | 2026-10-30 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose i | |
CVE-2026-84000 |
high | 7.8 | 0.0033 | 2026-10-30 | Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker t | |
CVE-2026-83995 |
high | 7.8 | 0.0033 | 2026-10-30 | Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privil | |
CVE-2026-83997 |
high | 8.1 | 0.0071 | 2026-10-30 | Use after free in Windows Message Queuing allows an unauthorized attacker to execute code | |
CVE-2026-83990 |
high | 7.8 | 0.0033 | 2026-10-30 | Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker | |
CVE-2026-83992 |
high | 8.8 | 0.0082 | 2026-10-30 | Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to |