Browse All CVEs
9,498 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-83875 |
medium | 5.5 | 0.0037 | 2026-10-29 | Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose informa | |
CVE-2026-83870 |
medium | 5.5 | 0.0044 | 2026-10-29 | Out-of-bounds read in Windows Aggregated Data Platform Service allows an authorized attack | |
CVE-2026-83865 |
medium | 4.7 | 0.0030 | 2026-10-29 | Relative path traversal in Windows Internet (wininet.dll) allows an authorized attacker to | |
CVE-2026-83864 |
medium | 5.5 | 0.0038 | 2026-10-29 | Improper access control in Windows NTFS allows an authorized attacker to disclose informat | |
CVE-2026-83854 |
medium | 5.5 | 0.0033 | 2026-10-29 | Improper access control in Windows Notification allows an authorized attacker to disclose | |
CVE-2026-83849 |
medium | 5.5 | 0.0045 | 2026-10-29 | Out-of-bounds read in Windows Hello allows an authorized attacker to disclose information | |
CVE-2026-83788 |
medium | 4.6 | 0.0052 | 2026-10-29 | Buffer over-read in Windows RNDIS allows an unauthorized attacker to disclose information | |
CVE-2026-83786 |
medium | 4.7 | 0.0070 | 2026-10-29 | Generation of error message containing sensitive information in Windows NTFS allows an aut | |
CVE-2026-83787 |
medium | 5.5 | 0.0033 | 2026-10-29 | Insufficient verification of data authenticity in Windows DHCP Server allows an authorized | |
CVE-2026-83776 |
medium | 6.8 | 0.0051 | 2026-10-29 | Out-of-bounds read in Microsoft Bluetooth Driver allows an unauthorized attacker to elevat | |
CVE-2026-83774 |
medium | 4.7 | 0.0072 | 2026-10-29 | Exposure of sensitive system information to an unauthorized control sphere in Windows Win3 | |
CVE-2026-83773 |
medium | 5.5 | 0.0095 | 2026-10-29 | Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI | |
CVE-2026-83765 |
medium | 5.5 | 0.0040 | 2026-10-29 | Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose i | |
CVE-2026-83766 |
medium | 4.2 | 0.0041 | 2026-10-29 | Incorrect authorization in Windows Hyper-V allows an authorized attacker to bypass a secur | |
CVE-2026-83764 |
medium | 5.5 | 0.0035 | 2026-10-29 | Incorrect authorization in Windows Clipboard User Service allows an authorized attacker to | |
CVE-2026-83760 |
medium | 5.5 | 0.0039 | 2026-10-29 | Out-of-bounds read in Microsoft Bluetooth Driver allows an authorized attacker to disclose | |
CVE-2026-83755 |
medium | 5.5 | 0.0047 | 2026-10-29 | Use of uninitialized resource in Windows Win32K allows an authorized attacker to disclose | |
CVE-2026-83747 |
medium | 5.5 | 0.0047 | 2026-10-29 | Out-of-bounds read in Windows Error Reporting allows an authorized attacker to disclose in | |
CVE-2026-83737 |
medium | 5.5 | 0.0047 | 2026-10-29 | Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information l | |
CVE-2026-83736 |
medium | 5.5 | 0.0046 | 2026-10-29 | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate priv | |
CVE-2026-83733 |
medium | 5.5 | 0.0047 | 2026-10-29 | Out-of-bounds read in Windows Print Spooler Components allows an authorized attacker to di | |
CVE-2026-83723 |
medium | 5.5 | 0.0047 | 2026-10-29 | Use of uninitialized resource in Windows Event Logging Service allows an authorized attack | |
CVE-2026-83719 |
medium | 5.5 | 0.0040 | 2026-10-29 | Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose info | |
CVE-2026-83714 |
medium | 5.5 | 0.0045 | 2026-10-29 | Use of uninitialized resource in Windows HTTP.sys allows an authorized attacker to disclos | |
CVE-2026-83713 |
medium | 5.5 | 0.0095 | 2026-10-29 | Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an au | |
CVE-2026-83706 |
medium | 6.7 | 0.0038 | 2026-10-29 | Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally | |
CVE-2026-83705 |
medium | 5.5 | 0.0092 | 2026-10-29 | Exposure of sensitive system information to an unauthorized control sphere in Windows HTTP | |
CVE-2026-83703 |
medium | 6.5 | 0.0067 | 2026-10-29 | Out-of-bounds read in Windows Wi-Fi Driver allows an unauthorized attacker to deny service | |
CVE-2026-83697 |
medium | 4.7 | 0.0023 | 2026-10-29 | Time-of-check time-of-use (toctou) race condition in Windows Modern Device Management (MDM | |
CVE-2026-83695 |
medium | 5.5 | 0.0047 | 2026-10-29 | Use of uninitialized resource in Windows Event Logging Service allows an authorized attack | |
CVE-2026-83685 |
medium | 6.5 | 0.0129 | 2026-10-29 | Buffer over-read in Windows IKE Extension allows an authorized attacker to deny service ov | |
CVE-2026-83686 |
medium | 5.5 | 0.0047 | 2026-10-29 | Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to | |
CVE-2026-83683 |
medium | 6.5 | 0.0128 | 2026-10-29 | Absolute path traversal in Windows Encrypting File System (EFS) allows an authorized attac | |
CVE-2026-83671 |
medium | 6.5 | 0.0047 | 2026-10-29 | Out-of-bounds read in Windows Hyper-V allows an authorized attacker to disclose informatio | |
CVE-2026-83672 |
medium | 4.7 | 0.0073 | 2026-10-29 | Exposure of sensitive system information to an unauthorized control sphere in Windows Inst | |
CVE-2026-83667 |
medium | 6.5 | 0.0123 | 2026-10-29 | Out-of-bounds read in Active Directory Domain Services allows an authorized attacker to de | |
CVE-2026-83668 |
medium | 5.5 | 0.0040 | 2026-10-29 | Out-of-bounds read in Windows WLAN Service allows an authorized attacker to disclose infor | |
CVE-2026-83664 |
medium | 5.5 | 0.0040 | 2026-10-29 | Access of resource using incompatible type ('type confusion') in Windows Portable Device F | |
CVE-2026-83658 |
medium | 5.5 | 0.0035 | 2026-10-29 | Improper access control in Windows Error Reporting allows an authorized attacker to disclo | |
CVE-2026-83656 |
medium | 4.7 | 0.0027 | 2026-10-29 | Missing authentication for critical function in Windows Modern Device Management (MDM) all | |
CVE-2026-83657 |
medium | 5.5 | 0.0028 | 2026-10-29 | Weak authentication in Windows Modern Device Management (MDM) allows an authorized attacke | |
CVE-2026-83648 |
medium | 6.5 | 0.0123 | 2026-10-29 | Null pointer dereference in Active Directory Domain Services allows an authorized attacker | |
CVE-2026-83649 |
medium | 6.5 | 0.0123 | 2026-10-29 | Out-of-bounds read in Windows Local Security Authority Subsystem Service (LSASS) allows an | |
CVE-2026-83646 |
medium | 5.4 | 0.0042 | 2026-10-29 | Url redirection to untrusted site ('open redirect') in Active Directory Federation Service | |
CVE-2026-83571 |
medium | 5.5 | 0.0047 | 2026-10-29 | Null pointer dereference in Windows Audio Service allows an authorized attacker to disclos | |
CVE-2026-83521 |
medium | 6.5 | 0.0113 | 2026-10-29 | Out-of-bounds read in Windows IKE Extension allows an authorized attacker to disclose info | |
CVE-2026-70298 |
medium | 6.5 | 0.0123 | 2026-10-29 | Improper limitation of a pathname to a restricted directory ('path traversal') in Microsof | |
CVE-2026-70295 |
medium | 5.5 | 0.0046 | 2026-10-29 | Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disc | |
CVE-2026-70293 |
medium | 5.5 | 0.0046 | 2026-10-29 | Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attac | |
CVE-2026-70294 |
medium | 5.5 | 0.0046 | 2026-10-29 | Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disc |