Browse All CVEs
33,080 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-78512 |
high | 8.8 | 0.0082 | 2026-10-30 | Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execu | |
CVE-2026-78506 |
medium | 5.5 | 0.0054 | 2026-10-30 | Improper null termination in Microsoft Office Word allows an unauthorized attacker to disc | |
CVE-2026-78464 |
high | 7.0 | 0.0020 | 2026-10-30 | Time-of-check time-of-use (toctou) race condition in Windows MIDI Service Module allows an | |
CVE-2026-78503 |
medium | 6.5 | 0.0092 | 2026-10-30 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose in | |
CVE-2026-78457 |
high | 7.0 | 0.0026 | 2026-10-30 | Use after free in Windows Security App allows an authorized attacker to elevate privileges | |
CVE-2026-78462 |
high | 8.8 | 0.0076 | 2026-10-30 | Authorization bypass through user-controlled key in Visual Studio Code allows an unauthori | |
CVE-2026-78455 |
medium | 4.3 | 0.0052 | 2026-10-30 | Out-of-bounds read in Xbox allows an unauthorized attacker to disclose information with a | |
CVE-2026-78456 |
high | 8.8 | 0.0091 | 2026-10-30 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code ove | |
CVE-2026-78454 |
medium | 5.5 | 0.0040 | 2026-10-30 | Out-of-bounds read in Windows CD-ROM Driver allows an authorized attacker to disclose info | |
CVE-2026-78452 |
medium | 4.6 | 0.0047 | 2026-10-30 | Out-of-bounds read in Microsoft Windows SCSI Class System File allows an unauthorized atta | |
CVE-2026-78453 |
medium | 6.5 | 0.0092 | 2026-10-30 | Integer underflow (wrap or wraparound) in Microsoft Windows SCSI Class System File allows | |
CVE-2026-78450 |
high | 8.1 | 0.0071 | 2026-10-30 | Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized atta | |
CVE-2026-78451 |
medium | 6.8 | 0.0044 | 2026-10-30 | Untrusted pointer dereference in Microsoft Windows SCSI Class System File allows an unauth | |
CVE-2026-78448 |
high | 7.8 | 0.0033 | 2026-10-30 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to e | |
CVE-2026-78449 |
high | 8.1 | 0.0071 | 2026-10-30 | Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized atta | |
CVE-2026-78447 |
high | 7.8 | 0.0033 | 2026-10-30 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to e | |
CVE-2026-78445 |
critical | 9.8 | 0.0097 | 2026-10-30 | Use after free in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attack | |
CVE-2026-78446 |
high | 7.5 | 0.0048 | 2026-10-30 | Use after free in Windows Distributed File System (DFS) allows an authorized attacker to e | |
CVE-2026-78442 |
high | 8.8 | 0.0082 | 2026-10-30 | Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to execute co | |
CVE-2026-78444 |
high | 8.1 | 0.0071 | 2026-10-30 | Untrusted pointer dereference in Windows Failover Cluster allows an unauthorized attacker | |
CVE-2026-77911 |
medium | 6.5 | 0.0092 | 2026-10-30 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose in | |
CVE-2026-78441 |
medium | 6.5 | 0.0092 | 2026-10-30 | Out-of-bounds read in Windows OLE DB allows an unauthorized attacker to disclose informati | |
CVE-2026-77905 |
high | 7.0 | 0.0026 | 2026-10-30 | Use after free in Windows Management Instrumentation allows an authorized attacker to elev | |
CVE-2026-77906 |
high | 8.8 | 0.0082 | 2026-10-30 | Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute cod | |
CVE-2026-77901 |
high | 8.8 | 0.0082 | 2026-10-30 | Null pointer dereference in Microsoft Office Word allows an unauthorized attacker to execu | |
CVE-2026-77488 |
medium | 5.5 | 0.0040 | 2026-10-30 | Integer underflow (wrap or wraparound) in SQL Server allows an authorized attacker to disc | |
CVE-2026-77897 |
high | 7.0 | 0.0028 | 2026-10-30 | Relative path traversal in Power Automate allows an authorized attacker to elevate privile | |
CVE-2026-77486 |
high | 8.8 | 0.0082 | 2026-10-30 | Integer overflow or wraparound in SQL Server allows an unauthorized attacker to execute co | |
CVE-2026-77487 |
high | 8.8 | 0.0078 | 2026-10-30 | Improper access control in SQL Server allows an authorized attacker to elevate privileges | |
CVE-2026-77484 |
high | 8.8 | 0.0169 | 2026-10-30 | Deserialization of untrusted data in SQL Server allows an authorized attacker to execute c | |
CVE-2026-77485 |
high | 7.0 | 0.0026 | 2026-10-30 | Use after free in SQL Server allows an authorized attacker to elevate privileges locally. | |
CVE-2026-77481 |
high | 8.8 | 0.0091 | 2026-10-30 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code ove | |
CVE-2026-77483 |
high | 8.8 | 0.0078 | 2026-10-30 | Weak authentication in SQL Server allows an authorized attacker to elevate privileges over | |
CVE-2026-73028 |
high | 8.8 | 0.0078 | 2026-10-30 | Improper access control in SQL Server allows an authorized attacker to elevate privileges | |
CVE-2026-77480 |
high | 8.8 | 0.0078 | 2026-10-30 | Insufficient granularity of access control in SQL Server allows an authorized attacker to | |
CVE-2026-73026 |
high | 7.8 | 0.0033 | 2026-10-30 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to e | |
CVE-2026-73024 |
high | 7.8 | 0.0033 | 2026-10-30 | Heap-based buffer overflow in Windows Services for NFS ONCRPC XDR Driver allows an authori | |
CVE-2026-73025 |
critical | 9.8 | 0.0090 | 2026-10-30 | Weak authentication in Windows iSCSI allows an unauthorized attacker to bypass a security | |
CVE-2026-73022 |
high | 7.0 | 0.0026 | 2026-10-30 | Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to | |
CVE-2026-73023 |
high | 8.8 | 0.0082 | 2026-10-30 | Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to | |
CVE-2026-73020 |
high | 7.8 | 0.0033 | 2026-10-30 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to e | |
CVE-2026-73021 |
high | 7.8 | 0.0033 | 2026-10-30 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to e | |
CVE-2026-73018 |
high | 8.8 | 0.0082 | 2026-10-30 | Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute cod | |
CVE-2026-73019 |
medium | 4.3 | 0.0077 | 2026-10-30 | Improper resolution of path equivalence in Windows URL Moniker allows an unauthorized atta | |
CVE-2026-73017 |
high | 7.5 | 0.0028 | 2026-10-30 | Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to exe | |
CVE-2026-73014 |
high | 7.8 | 0.0030 | 2026-10-30 | Missing authorization in Data Sharing Service Client allows an authorized attacker to elev | |
CVE-2026-73015 |
high | 7.8 | 0.0033 | 2026-10-30 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to e | |
CVE-2026-73012 |
high | 8.8 | 0.0091 | 2026-10-30 | Heap-based buffer overflow in Windows Management Services allows an authorized attacker to | |
CVE-2026-73013 |
high | 8.8 | 0.0082 | 2026-10-30 | Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to | |
CVE-2026-73010 |
critical | 9.8 | 0.0097 | 2026-10-30 | Use after free in Windows Failover Cluster allows an unauthorized attacker to execute code |