Browse All CVEs
37,890 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-68840 |
high | 7.0 | 0.0020 | 2026-10-30 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-68837 |
high | 7.0 | 0.0026 | 2026-10-30 | Use after free in Windows File History Service allows an authorized attacker to elevate pr | |
CVE-2026-68838 |
high | 8.0 | 0.0077 | 2026-10-30 | Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privi | |
CVE-2026-68834 |
high | 8.0 | 0.0077 | 2026-10-30 | Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privi | |
CVE-2026-68835 |
high | 7.1 | 0.0057 | 2026-10-30 | Use after free in Windows Print Spooler Components allows an authorized attacker to elevat | |
CVE-2026-68831 |
medium | 5.5 | 0.0055 | 2026-10-30 | Files or directories accessible to external parties in Windows Defender Firewall Service a | |
CVE-2026-68832 |
high | 7.8 | 0.0033 | 2026-10-30 | Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate pr | |
CVE-2026-68830 |
medium | 5.5 | 0.0037 | 2026-10-30 | Improper link resolution before file access ('link following') in Windows Universal Plug a | |
CVE-2026-68827 |
high | 8.0 | 0.0077 | 2026-10-30 | Integer underflow (wrap or wraparound) in Windows GDI+ allows an authorized attacker to el | |
CVE-2026-68828 |
high | 8.8 | 0.0082 | 2026-10-30 | Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to exe | |
CVE-2026-68824 |
high | 7.0 | 0.0020 | 2026-10-30 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-68825 |
high | 7.0 | 0.0026 | 2026-10-30 | Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate priv | |
CVE-2026-68787 |
high | 7.8 | 0.0033 | 2026-10-30 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code loc | |
CVE-2026-68785 |
medium | 4.9 | 0.0112 | 2026-10-30 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code ove | |
CVE-2026-68786 |
high | 8.8 | 0.0091 | 2026-10-30 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code ove | |
CVE-2026-68784 |
medium | 6.5 | 0.0100 | 2026-10-30 | Out-of-bounds read in SQL Server allows an authorized attacker to disclose information ove | |
CVE-2026-68780 |
medium | 6.5 | 0.0100 | 2026-10-30 | Out-of-bounds read in SQL Server allows an authorized attacker to disclose information ove | |
CVE-2026-68778 |
medium | 6.5 | 0.0100 | 2026-10-30 | Out-of-bounds read in SQL Server allows an authorized attacker to disclose information ove | |
CVE-2026-68779 |
medium | 6.5 | 0.0100 | 2026-10-30 | Out-of-bounds read in SQL Server allows an authorized attacker to disclose information ove | |
CVE-2026-68776 |
medium | 6.5 | 0.0100 | 2026-10-30 | Use of uninitialized resource in SQL Server allows an authorized attacker to disclose info | |
CVE-2026-68777 |
medium | 6.5 | 0.0100 | 2026-10-30 | Out-of-bounds read in SQL Server allows an authorized attacker to disclose information ove | |
CVE-2026-68775 |
high | 8.8 | 0.0091 | 2026-10-30 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code ove | |
CVE-2026-67643 |
critical | 9.8 | 0.0097 | 2026-10-30 | Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code o | |
CVE-2026-67648 |
medium | 6.5 | 0.0100 | 2026-10-30 | Use of uninitialized resource in SQL Server allows an authorized attacker to disclose info | |
CVE-2026-67641 |
medium | 6.5 | 0.0114 | 2026-10-30 | Integer overflow or wraparound in SQL Server allows an authorized attacker to deny service | |
CVE-2026-67642 |
high | 8.8 | 0.0091 | 2026-10-30 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code ove | |
CVE-2026-67638 |
high | 8.8 | 0.0091 | 2026-10-30 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code ove | |
CVE-2026-67639 |
high | 8.8 | 0.0091 | 2026-10-30 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code ove | |
CVE-2026-67636 |
critical | 9.0 | 0.0071 | 2026-10-30 | Out-of-bounds read in SQL Server allows an unauthorized attacker to execute code over a ne | |
CVE-2026-67390 |
medium | 6.5 | 0.0100 | 2026-10-30 | Buffer over-read in SQL Server allows an authorized attacker to disclose information over | |
CVE-2026-67393 |
medium | 6.5 | 0.0100 | 2026-10-30 | Buffer over-read in SQL Server allows an authorized attacker to disclose information over | |
CVE-2026-67388 |
high | 8.8 | 0.0091 | 2026-10-30 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code ove | |
CVE-2026-67389 |
medium | 6.5 | 0.0100 | 2026-10-30 | Out-of-bounds read in SQL Server allows an authorized attacker to disclose information ove | |
CVE-2026-67385 |
high | 8.8 | 0.0091 | 2026-10-30 | Use after free in SQL Server allows an authorized attacker to execute code over a network. | |
CVE-2026-67386 |
medium | 6.5 | 0.0100 | 2026-10-30 | Use of uninitialized resource in SQL Server allows an authorized attacker to disclose info | |
CVE-2026-67383 |
medium | 6.5 | 0.0100 | 2026-10-30 | Generation of error message containing sensitive information in SQL Server allows an autho | |
CVE-2026-67384 |
high | 8.8 | 0.0091 | 2026-10-30 | Integer overflow or wraparound in SQL Server allows an authorized attacker to execute code | |
CVE-2026-67380 |
high | 8.8 | 0.0091 | 2026-10-30 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code ove | |
CVE-2026-67381 |
high | 8.8 | 0.0091 | 2026-10-30 | Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileg | |
CVE-2026-67378 |
critical | 9.0 | 0.0071 | 2026-10-30 | Untrusted pointer dereference in SQL Server allows an unauthorized attacker to execute cod | |
CVE-2026-67379 |
high | 8.5 | 0.0066 | 2026-10-30 | Stack-based buffer overflow in SQL Server allows an authorized attacker to execute code ov | |
CVE-2026-67376 |
high | 7.5 | 0.0117 | 2026-10-30 | Integer overflow or wraparound in SQL Server allows an unauthorized attacker to deny servi | |
CVE-2026-66818 |
high | 8.8 | 0.0078 | 2026-10-30 | Improper privilege management in SQL Server allows an authorized attacker to elevate privi | |
CVE-2026-66820 |
high | 8.8 | 0.0099 | 2026-10-30 | Improper neutralization of special elements used in an sql command ('sql injection') in SQ | |
CVE-2026-66814 |
high | 8.8 | 0.0078 | 2026-10-30 | Insufficient granularity of access control in SQL Server allows an authorized attacker to | |
CVE-2026-66816 |
medium | 6.5 | 0.0100 | 2026-10-30 | Insufficient logging in SQL Server allows an authorized attacker to bypass a security feat | |
CVE-2026-66305 |
high | 7.1 | 0.0053 | 2026-10-30 | Use of client-side authentication in Skype for Business allows an authorized attacker to p | |
CVE-2026-65669 |
critical | 9.6 | 0.0086 | 2026-10-30 | Improper neutralization of special elements in output used by a downstream component ('inj | |
CVE-2026-63523 |
medium | 6.5 | 0.0055 | 2026-10-30 | Improper neutralization of input during web page generation ('cross-site scripting') in Sk | |
CVE-2026-62813 |
high | 7.5 | 0.0066 | 2026-10-30 | Use after free in Active Directory Domain Services allows an authorized attacker to execut |