Browse All CVEs
9,482 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-85821 |
medium | 6.5 | 0.0095 | 2026-10-29 | Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an au | |
CVE-2026-85815 |
medium | 5.5 | 0.0039 | 2026-10-29 | Out-of-bounds read in Windows Device Association Service allows an authorized attacker to | |
CVE-2026-85816 |
medium | 5.7 | 0.0052 | 2026-10-29 | Out-of-bounds read in Windows Wi-Fi Driver allows an authorized attacker to disclose infor | |
CVE-2026-85812 |
medium | 5.5 | 0.0049 | 2026-10-29 | Files or directories accessible to external parties in Windows Bind Filter Driver allows a | |
CVE-2026-85805 |
medium | 6.5 | 0.0059 | 2026-10-29 | Improperly implemented security check for standard in Windows PowerShell allows an unautho | |
CVE-2026-85797 |
medium | 6.5 | 0.0091 | 2026-10-29 | Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information | |
CVE-2026-85794 |
medium | 5.5 | 0.0039 | 2026-10-29 | Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an authorize | |
CVE-2026-85793 |
medium | 5.5 | 0.0046 | 2026-10-29 | Exposure of sensitive system information to an unauthorized control sphere in Windows Sysm | |
CVE-2026-85374 |
medium | 5.5 | 0.0039 | 2026-10-29 | Out-of-bounds read in Windows Installer allows an authorized attacker to disclose informat | |
CVE-2026-85337 |
medium | 6.5 | 0.0087 | 2026-10-29 | Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose in | |
CVE-2026-85336 |
medium | 5.5 | 0.0039 | 2026-10-29 | Out-of-bounds read in Windows Device Association Service allows an authorized attacker to | |
CVE-2026-85333 |
medium | 6.7 | 0.0020 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-85331 |
medium | 6.5 | 0.0095 | 2026-10-29 | Out-of-bounds read in Windows Device Association Service allows an authorized attacker to | |
CVE-2026-85323 |
medium | 6.8 | 0.0048 | 2026-10-29 | Weak authentication in Network Device Enrollment Service (NDES) allows an authorized attac | |
CVE-2026-85320 |
medium | 5.5 | 0.0031 | 2026-10-29 | Use of uninitialized resource in Windows Print Spooler Components allows an authorized att | |
CVE-2026-84011 |
medium | 5.5 | 0.0028 | 2026-10-29 | Incorrect authorization in Windows SMB Client allows an authorized attacker to bypass a se | |
CVE-2026-84007 |
medium | 6.5 | 0.0100 | 2026-10-29 | Out-of-bounds read in Remote Desktop Gateway Service allows an authorized attacker to disc | |
CVE-2026-84009 |
medium | 4.7 | 0.0020 | 2026-10-29 | Time-of-check time-of-use (toctou) race condition in Windows Projected File System allows | |
CVE-2026-83945 |
medium | 6.6 | 0.0056 | 2026-10-29 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code ove | |
CVE-2026-83933 |
medium | 5.5 | 0.0049 | 2026-10-29 | Improper link resolution before file access ('link following') in Windows Update Orchestra | |
CVE-2026-83909 |
medium | 4.7 | 0.0043 | 2026-10-29 | Exposure of sensitive system information to an unauthorized control sphere in Windows Win3 | |
CVE-2026-83906 |
medium | 6.5 | 0.0101 | 2026-10-29 | Incorrect implementation of authentication algorithm in Windows Shell allows an unauthoriz | |
CVE-2026-83907 |
medium | 5.5 | 0.0095 | 2026-10-29 | Exposure of sensitive system information to an unauthorized control sphere in Windows Hell | |
CVE-2026-83904 |
medium | 5.5 | 0.0043 | 2026-10-29 | Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose informa | |
CVE-2026-83905 |
medium | 4.7 | 0.0073 | 2026-10-29 | Exposure of sensitive system information to an unauthorized control sphere in Windows Shel | |
CVE-2026-83897 |
medium | 4.7 | 0.0069 | 2026-10-29 | Exposure of sensitive system information to an unauthorized control sphere in Windows Win3 | |
CVE-2026-83898 |
medium | 5.5 | 0.0043 | 2026-10-29 | Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose informa | |
CVE-2026-83895 |
medium | 6.8 | 0.0050 | 2026-10-29 | Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an unauthorized attack | |
CVE-2026-83893 |
medium | 5.5 | 0.0054 | 2026-10-29 | Exposure of sensitive system information to an unauthorized control sphere in Windows Clip | |
CVE-2026-83892 |
medium | 5.5 | 0.0045 | 2026-10-29 | Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose informa | |
CVE-2026-83888 |
medium | 6.5 | 0.0098 | 2026-10-29 | Buffer over-read in Windows CD-ROM Driver allows an unauthorized attacker to elevate privi | |
CVE-2026-83887 |
medium | 5.5 | 0.0043 | 2026-10-29 | Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose informa | |
CVE-2026-83885 |
medium | 5.6 | 0.0021 | 2026-10-29 | Inadequate encryption strength in Windows Virtualization-Based Security (VBS) Enclave allo | |
CVE-2026-83884 |
medium | 5.5 | 0.0045 | 2026-10-29 | Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose informa | |
CVE-2026-83875 |
medium | 5.5 | 0.0037 | 2026-10-29 | Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose informa | |
CVE-2026-83870 |
medium | 5.5 | 0.0044 | 2026-10-29 | Out-of-bounds read in Windows Aggregated Data Platform Service allows an authorized attack | |
CVE-2026-83865 |
medium | 4.7 | 0.0030 | 2026-10-29 | Relative path traversal in Windows Internet (wininet.dll) allows an authorized attacker to | |
CVE-2026-83864 |
medium | 5.5 | 0.0038 | 2026-10-29 | Improper access control in Windows NTFS allows an authorized attacker to disclose informat | |
CVE-2026-83854 |
medium | 5.5 | 0.0033 | 2026-10-29 | Improper access control in Windows Notification allows an authorized attacker to disclose | |
CVE-2026-83849 |
medium | 5.5 | 0.0045 | 2026-10-29 | Out-of-bounds read in Windows Hello allows an authorized attacker to disclose information | |
CVE-2026-83788 |
medium | 4.6 | 0.0052 | 2026-10-29 | Buffer over-read in Windows RNDIS allows an unauthorized attacker to disclose information | |
CVE-2026-83786 |
medium | 4.7 | 0.0070 | 2026-10-29 | Generation of error message containing sensitive information in Windows NTFS allows an aut | |
CVE-2026-83787 |
medium | 5.5 | 0.0033 | 2026-10-29 | Insufficient verification of data authenticity in Windows DHCP Server allows an authorized | |
CVE-2026-83776 |
medium | 6.8 | 0.0051 | 2026-10-29 | Out-of-bounds read in Microsoft Bluetooth Driver allows an unauthorized attacker to elevat | |
CVE-2026-83774 |
medium | 4.7 | 0.0072 | 2026-10-29 | Exposure of sensitive system information to an unauthorized control sphere in Windows Win3 | |
CVE-2026-83773 |
medium | 5.5 | 0.0095 | 2026-10-29 | Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI | |
CVE-2026-83765 |
medium | 5.5 | 0.0040 | 2026-10-29 | Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose i | |
CVE-2026-83766 |
medium | 4.2 | 0.0041 | 2026-10-29 | Incorrect authorization in Windows Hyper-V allows an authorized attacker to bypass a secur | |
CVE-2026-83764 |
medium | 5.5 | 0.0035 | 2026-10-29 | Incorrect authorization in Windows Clipboard User Service allows an authorized attacker to | |
CVE-2026-83760 |
medium | 5.5 | 0.0039 | 2026-10-29 | Out-of-bounds read in Microsoft Bluetooth Driver allows an authorized attacker to disclose |