Browse All CVEs
9,500 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-70293 |
medium | 5.5 | 0.0046 | 2026-10-29 | Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attac | |
CVE-2026-70294 |
medium | 5.5 | 0.0046 | 2026-10-29 | Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disc | |
CVE-2026-70292 |
medium | 5.5 | 0.0046 | 2026-10-29 | Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disc | |
CVE-2026-70288 |
medium | 5.5 | 0.0035 | 2026-10-29 | Time-of-check time-of-use (toctou) race condition in Windows Win32 Kernel Subsystem allows | |
CVE-2026-70284 |
medium | 5.5 | 0.0046 | 2026-10-29 | Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attac | |
CVE-2026-70263 |
medium | 6.5 | 0.0100 | 2026-10-29 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose in | |
CVE-2026-70264 |
medium | 5.5 | 0.0049 | 2026-10-29 | Improper link resolution before file access ('link following') in Microsoft Defender allow | |
CVE-2026-70259 |
medium | 6.5 | 0.0092 | 2026-10-29 | Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized att | |
CVE-2026-70244 |
medium | 6.5 | 0.0104 | 2026-10-29 | Out-of-bounds read in DNS Server allows an unauthorized attacker to disclose information o | |
CVE-2026-70206 |
medium | 6.5 | 0.0097 | 2026-10-29 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose in | |
CVE-2026-70196 |
medium | 5.9 | 0.0091 | 2026-10-29 | Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to deny | |
CVE-2026-70189 |
medium | 6.7 | 0.0033 | 2026-10-29 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code loc | |
CVE-2026-70166 |
medium | 6.5 | 0.0129 | 2026-10-29 | Out-of-bounds read in Windows DNS allows an authorized attacker to deny service over a net | |
CVE-2026-70119 |
medium | 6.5 | 0.0129 | 2026-10-29 | Out-of-bounds read in Windows DNS allows an authorized attacker to execute code over a net | |
CVE-2026-70097 |
medium | 5.6 | 0.0022 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-70087 |
medium | 5.5 | 0.0032 | 2026-10-29 | Incorrect authorization in DNS Server allows an authorized attacker to bypass a security f | |
CVE-2026-70085 |
medium | 5.5 | 0.0032 | 2026-10-29 | Missing authorization in DNS Server allows an authorized attacker to perform tampering loc | |
CVE-2026-70083 |
medium | 5.5 | 0.0032 | 2026-10-29 | Incorrect authorization in DNS Server allows an authorized attacker to perform tampering l | |
CVE-2026-70074 |
medium | 5.5 | 0.0046 | 2026-10-29 | Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information lo | |
CVE-2026-70071 |
medium | 5.5 | 0.0026 | 2026-10-29 | Improper verification of cryptographic signature in DNS Server allows an authorized attack | |
CVE-2026-70041 |
medium | 5.5 | 0.0046 | 2026-10-29 | Buffer over-read in Windows CD-ROM Driver allows an authorized attacker to disclose inform | |
CVE-2026-70044 |
medium | 5.5 | 0.0059 | 2026-10-29 | Out-of-bounds read in Microsoft Windows Media Foundation allows an unauthorized attacker t | |
CVE-2026-70025 |
medium | 5.3 | 0.0108 | 2026-10-29 | Use after free in Windows Netlogon allows an authorized attacker to deny service over a ne | |
CVE-2026-70017 |
medium | 5.5 | 0.0046 | 2026-10-29 | Access of resource using incompatible type ('type confusion') in Windows Secure Kernel Mod | |
CVE-2026-69999 |
medium | 5.5 | 0.0046 | 2026-10-29 | Out-of-bounds read in Windows Update allows an authorized attacker to disclose information | |
CVE-2026-69967 |
medium | 5.5 | 0.0047 | 2026-10-29 | Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to disclose inf | |
CVE-2026-69958 |
medium | 6.8 | 0.0050 | 2026-10-29 | Heap-based buffer overflow in Windows Overlay Filter allows an unauthorized attacker to ex | |
CVE-2026-69954 |
medium | 5.5 | 0.0046 | 2026-10-29 | Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose infor | |
CVE-2026-69955 |
medium | 6.5 | 0.0098 | 2026-10-29 | Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose i | |
CVE-2026-69947 |
medium | 6.8 | 0.0050 | 2026-10-29 | Heap-based buffer overflow in Windows Overlay Filter allows an unauthorized attacker to ex | |
CVE-2026-69940 |
medium | 6.5 | 0.0104 | 2026-10-29 | Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose i | |
CVE-2026-69914 |
medium | 5.5 | 0.0046 | 2026-10-29 | Out-of-bounds read in Windows AppX Deployment Service allows an authorized attacker to dis | |
CVE-2026-69902 |
medium | 6.7 | 0.0040 | 2026-10-29 | Untrusted pointer dereference in Windows NTFS allows an authorized attacker to execute cod | |
CVE-2026-69905 |
medium | 5.5 | 0.0034 | 2026-10-29 | Missing authorization in Windows AppX Deployment Service allows an authorized attacker to | |
CVE-2026-69877 |
medium | 6.5 | 0.0046 | 2026-10-29 | Origin validation error in Azure DevOps allows an unauthorized attacker to disclose inform | |
CVE-2026-69721 |
medium | 5.5 | 0.0047 | 2026-10-29 | Out-of-bounds read in Windows iSCSI allows an authorized attacker to disclose information | |
CVE-2026-67626 |
medium | 6.5 | 0.0088 | 2026-10-29 | Uncontrolled resource consumption in SQL Server allows an authorized attacker to deny serv | |
CVE-2026-67628 |
medium | 4.9 | 0.0080 | 2026-10-29 | Out-of-bounds read in SQL Server allows an authorized attacker to disclose information ove | |
CVE-2026-108454 |
medium | 6.5 | 0.0074 | 2026-10-29 | Buffer over-read in Microsoft Office PowerPoint allows an unauthorized attacker to disclos | |
CVE-2026-108455 |
medium | 6.5 | 0.0074 | 2026-10-29 | Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to discl | |
CVE-2026-108453 |
medium | 6.5 | 0.0076 | 2026-10-29 | Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to discl | |
CVE-2026-108438 |
medium | 6.5 | 0.0074 | 2026-10-29 | Use after free in Microsoft Office Word allows an unauthorized attacker to disclose inform | |
CVE-2026-108436 |
medium | 6.5 | 0.0074 | 2026-10-29 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose in | |
CVE-2026-108435 |
medium | 6.5 | 0.0074 | 2026-10-29 | Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to | |
CVE-2026-108434 |
medium | 6.5 | 0.0074 | 2026-10-29 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose in | |
CVE-2026-105731 |
medium | 5.5 | 0.0043 | 2026-10-29 | Use of uninitialized resource in Microsoft Graphics Component allows an authorized attacke | |
CVE-2026-105726 |
medium | 5.5 | 0.0043 | 2026-10-29 | Out-of-bounds read in Microsoft Defender allows an authorized attacker to disclose informa | |
CVE-2026-105719 |
medium | 6.5 | 0.0109 | 2026-10-29 | Improper input validation in Microsoft Office SharePoint allows an authorized attacker to | |
CVE-2026-105720 |
medium | 4.3 | 0.0049 | 2026-10-29 | Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to el | |
CVE-2026-105713 |
medium | 5.7 | 0.0042 | 2026-10-29 | Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized att |