Browse All CVEs
11,738 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-88100 |
high | 7.8 | 0.0031 | 2026-10-29 | Use after free in Windows Storage Spaces Controller allows an authorized attacker to eleva | |
CVE-2026-88101 |
high | 7.8 | 0.0021 | 2026-10-29 | Weak authentication in Microsoft Input Method Editor (IME) allows an authorized attacker t | |
CVE-2026-88096 |
high | 7.0 | 0.0015 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-88098 |
high | 7.0 | 0.0020 | 2026-10-29 | Untrusted pointer dereference in Windows Security Support Provider Interface allows an aut | |
CVE-2026-88080 |
high | 7.8 | 0.0024 | 2026-10-29 | Use after free in Windows Installer allows an authorized attacker to elevate privileges lo | |
CVE-2026-88091 |
high | 7.8 | 0.0293 | 2026-10-29 | Deserialization of untrusted data in Windows Management Instrumentation allows an authoriz | |
CVE-2026-88076 |
high | 7.0 | 0.0028 | 2026-10-29 | Null pointer dereference in Windows Installer allows an authorized attacker to elevate pri | |
CVE-2026-88079 |
high | 7.0 | 0.0028 | 2026-10-29 | Null pointer dereference in Windows MIDI Service Module allows an authorized attacker to e | |
CVE-2026-88074 |
high | 7.8 | 0.0032 | 2026-10-29 | Integer overflow or wraparound in Windows Virtualization-Based Security (VBS) Enclave allo | |
CVE-2026-88072 |
high | 7.8 | 0.0039 | 2026-10-29 | Improper access control in Windows Host Guardian Service allows an authorized attacker to | |
CVE-2026-88073 |
high | 8.8 | 0.0027 | 2026-10-29 | Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privile | |
CVE-2026-88070 |
high | 7.8 | 0.0032 | 2026-10-29 | Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privilege | |
CVE-2026-88071 |
high | 7.8 | 0.0031 | 2026-10-29 | Double free in Windows Hyper-V allows an authorized attacker to elevate privileges locally | |
CVE-2026-87715 |
high | 7.0 | 0.0025 | 2026-10-29 | Use after free in Windows Installer allows an authorized attacker to elevate privileges lo | |
CVE-2026-87716 |
high | 7.5 | 0.0112 | 2026-10-29 | Heap-based buffer overflow in Windows Storage Spaces Controller allows an unauthorized att | |
CVE-2026-87712 |
high | 7.8 | 0.0024 | 2026-10-29 | Use after free in Windows Quality of Service (QoS) Packet Scheduler allows an authorized a | |
CVE-2026-87713 |
high | 7.5 | 0.0027 | 2026-10-29 | Use after free in Windows Bluetooth Port Driver allows an unauthorized attacker to elevate | |
CVE-2026-87710 |
high | 7.0 | 0.0015 | 2026-10-29 | Improper access control in Microsoft Local Security Authority Server (lsasrv) allows an au | |
CVE-2026-87711 |
high | 7.8 | 0.0024 | 2026-10-29 | Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate | |
CVE-2026-87692 |
high | 7.8 | 0.0168 | 2026-10-29 | Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attack | |
CVE-2026-85943 |
high | 7.0 | 0.0022 | 2026-10-29 | Time-of-check time-of-use (toctou) race condition in Reliable Multicast Transport Driver ( | |
CVE-2026-85926 |
high | 8.1 | 0.0066 | 2026-10-29 | Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized a | |
CVE-2026-85922 |
high | 7.4 | 0.0061 | 2026-10-29 | Weak authentication in Azure Key Vault allows an unauthorized attacker to bypass a securit | |
CVE-2026-85925 |
high | 8.2 | 0.0053 | 2026-10-29 | Improper restriction of communication channel to intended endpoints in Azure Key Vault all | |
CVE-2026-85918 |
high | 7.0 | 0.0025 | 2026-10-29 | Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized | |
CVE-2026-85920 |
high | 7.0 | 0.0016 | 2026-10-29 | Time-of-check time-of-use (toctou) race condition in Windows BitLocker allows an authorize | |
CVE-2026-85915 |
high | 7.8 | 0.0031 | 2026-10-29 | Heap-based buffer overflow in Windows PCI Bus Driver allows an authorized attacker to elev | |
CVE-2026-85914 |
high | 7.0 | 0.0020 | 2026-10-29 | Use after free in Windows Embedded Mode Service allows an authorized attacker to elevate p | |
CVE-2026-85903 |
high | 8.8 | 0.0070 | 2026-10-29 | Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute cod | |
CVE-2026-85904 |
high | 7.0 | 0.0015 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-85901 |
high | 7.8 | 0.0041 | 2026-10-29 | Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to eleva | |
CVE-2026-85902 |
high | 7.8 | 0.0038 | 2026-10-29 | Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to | |
CVE-2026-85900 |
high | 8.8 | 0.0152 | 2026-10-29 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized atta | |
CVE-2026-85891 |
high | 7.5 | 0.0092 | 2026-10-29 | Exposure of sensitive information to an unauthorized actor in Azure HDInsight allows an un | |
CVE-2026-85884 |
high | 7.8 | 0.0045 | 2026-10-29 | 1 PoC | Missing authentication for critical function in Windows Health and Optimized Experiences S |
CVE-2026-85886 |
high | 8.5 | 0.0040 | 2026-10-29 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code ove | |
CVE-2026-85879 |
high | 7.0 | 0.0022 | 2026-10-29 | Time-of-check time-of-use (toctou) race condition in Windows Subsystem for Linux allows an | |
CVE-2026-85881 |
high | 8.0 | 0.0068 | 2026-10-29 | Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker | |
CVE-2026-85876 |
high | 7.0 | 0.0020 | 2026-10-29 | Use after free in SQL Server allows an authorized attacker to elevate privileges locally. | |
CVE-2026-85874 |
high | 7.8 | 0.0036 | 2026-10-29 | Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to e | |
CVE-2026-85871 |
high | 7.8 | 0.0032 | 2026-10-29 | Heap-based buffer overflow in Windows Kernel-Mode Drivers allows an authorized attacker to | |
CVE-2026-85872 |
high | 7.8 | 0.0029 | 2026-10-29 | Use after free in Windows Storage VSP Driver allows an authorized attacker to elevate priv | |
CVE-2026-85869 |
high | 7.8 | 0.0032 | 2026-10-29 | Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized atta | |
CVE-2026-85870 |
high | 7.0 | 0.0033 | 2026-10-29 | Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized a | |
CVE-2026-85868 |
high | 7.0 | 0.0029 | 2026-10-29 | Use after free in Windows Common Log File System Driver allows an authorized attacker to e | |
CVE-2026-85867 |
high | 7.8 | 0.0024 | 2026-10-29 | Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorize | |
CVE-2026-85863 |
high | 7.8 | 0.0024 | 2026-10-29 | Use after free in Windows Clipboard User Service allows an authorized attacker to elevate | |
CVE-2026-85864 |
high | 7.8 | 0.0075 | 2026-10-29 | Improper privilege management in Python allows an authorized attacker to elevate privilege | |
CVE-2026-85861 |
high | 7.8 | 0.0024 | 2026-10-29 | Use after free in Windows Clipboard User Service allows an authorized attacker to elevate | |
CVE-2026-85860 |
high | 7.8 | 0.0024 | 2026-10-29 | Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to e |