Browse All CVEs
11,741 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-85365 |
high | 7.0 | 0.0020 | 2026-10-29 | Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to ele | |
CVE-2026-85338 |
high | 7.8 | 0.0032 | 2026-10-29 | Out-of-bounds read in Microsoft Graphics Component allows an authorized attacker to elevat | |
CVE-2026-85334 |
high | 7.5 | 0.0098 | 2026-10-29 | Out-of-bounds read in Windows Message Queuing Queue Manager allows an unauthorized attacke | |
CVE-2026-85332 |
high | 7.8 | 0.0031 | 2026-10-29 | Use after free in Windows Device Association Service allows an authorized attacker to elev | |
CVE-2026-85329 |
high | 7.0 | 0.0019 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-85327 |
high | 7.8 | 0.0031 | 2026-10-29 | Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attack | |
CVE-2026-85328 |
high | 7.0 | 0.0022 | 2026-10-29 | Weak authentication in Windows Projected File System allows an authorized attacker to elev | |
CVE-2026-85324 |
high | 7.5 | 0.0075 | 2026-10-29 | Memory allocation with excessive size value in Active Directory Federation Services (AD FS | |
CVE-2026-85322 |
high | 7.5 | 0.0103 | 2026-10-29 | Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows a | |
CVE-2026-85321 |
high | 7.5 | 0.0106 | 2026-10-29 | Allocation of resources without limits or throttling in Active Directory Federation Servic | |
CVE-2026-85318 |
high | 7.8 | 0.0032 | 2026-10-29 | Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to ele | |
CVE-2026-85319 |
high | 7.5 | 0.0110 | 2026-10-29 | Allocation of resources without limits or throttling in Active Directory Federation Servic | |
CVE-2026-84020 |
high | 7.0 | 0.0025 | 2026-10-29 | Use after free in Windows Routing and Remote Access Service (RRAS) allows an authorized at | |
CVE-2026-84018 |
high | 7.0 | 0.0019 | 2026-10-29 | Use after free in Windows Print Spooler Components allows an authorized attacker to elevat | |
CVE-2026-84019 |
high | 7.0 | 0.0020 | 2026-10-29 | Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to | |
CVE-2026-84016 |
high | 7.8 | 0.0031 | 2026-10-29 | Out-of-bounds write in Windows EAPHost Service allows an authorized attacker to elevate pr | |
CVE-2026-84017 |
high | 7.5 | 0.0112 | 2026-10-29 | Null pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an una | |
CVE-2026-84014 |
high | 7.0 | 0.0022 | 2026-10-29 | Heap-based buffer overflow in Windows Device Association Service allows an authorized atta | |
CVE-2026-84013 |
high | 7.8 | 0.0031 | 2026-10-29 | Use after free in Windows Telephony Server allows an authorized attacker to elevate privil | |
CVE-2026-84012 |
high | 8.1 | 0.0067 | 2026-10-29 | Double free in Remote Desktop Gateway Service allows an unauthorized attacker to execute c | |
CVE-2026-83934 |
high | 8.8 | 0.0089 | 2026-10-29 | Stack-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute cod | |
CVE-2026-83922 |
high | 7.8 | 0.0034 | 2026-10-29 | Use after free in Windows Direct Composition allows an authorized attacker to elevate priv | |
CVE-2026-83923 |
high | 8.8 | 0.0104 | 2026-10-29 | Relative path traversal in OpenSSH for Windows allows an unauthorized attacker to execute | |
CVE-2026-83920 |
high | 7.8 | 0.0033 | 2026-10-29 | Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized atta | |
CVE-2026-83921 |
high | 7.0 | 0.0028 | 2026-10-29 | Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized atta | |
CVE-2026-83919 |
high | 7.8 | 0.0032 | 2026-10-29 | Heap-based buffer overflow in Microsoft Internet Messaging API allows an authorized attack | |
CVE-2026-83917 |
high | 7.0 | 0.0028 | 2026-10-29 | Use after free in Windows ALPC allows an authorized attacker to elevate privileges locally | |
CVE-2026-83918 |
high | 7.8 | 0.0033 | 2026-10-29 | Integer overflow or wraparound in Windows Kernel allows an authorized attacker to elevate | |
CVE-2026-83915 |
high | 7.0 | 0.0031 | 2026-10-29 | Use after free in Windows Diagnostic Policy Service allows an authorized attacker to eleva | |
CVE-2026-83916 |
high | 7.0 | 0.0031 | 2026-10-29 | Double free in Windows Error Reporting allows an authorized attacker to execute code local | |
CVE-2026-83913 |
high | 7.8 | 0.0039 | 2026-10-29 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges local | |
CVE-2026-83914 |
high | 8.1 | 0.0082 | 2026-10-29 | Use after free in Microsoft XML allows an unauthorized attacker to execute code over a net | |
CVE-2026-83912 |
high | 7.8 | 0.0033 | 2026-10-29 | Use after free in Windows Direct Composition allows an authorized attacker to elevate priv | |
CVE-2026-83911 |
high | 7.0 | 0.0031 | 2026-10-29 | Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate pri | |
CVE-2026-83908 |
high | 7.0 | 0.0031 | 2026-10-29 | Release of invalid pointer or reference in RPC Runtime allows an authorized attacker to el | |
CVE-2026-83903 |
high | 7.8 | 0.0039 | 2026-10-29 | Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to | |
CVE-2026-83901 |
high | 7.0 | 0.0031 | 2026-10-29 | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate | |
CVE-2026-83902 |
high | 7.8 | 0.0040 | 2026-10-29 | Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to | |
CVE-2026-83899 |
high | 7.0 | 0.0024 | 2026-10-29 | Improper privilege management in Windows Installer allows an authorized attacker to elevat | |
CVE-2026-83900 |
high | 7.0 | 0.0030 | 2026-10-29 | Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate priv | |
CVE-2026-83896 |
high | 7.8 | 0.0040 | 2026-10-29 | Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to | |
CVE-2026-83891 |
high | 8.8 | 0.0090 | 2026-10-29 | Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to ex | |
CVE-2026-83889 |
high | 8.8 | 0.0106 | 2026-10-29 | Release of invalid pointer or reference in DNS Server allows an authorized attacker to exe | |
CVE-2026-83886 |
high | 7.0 | 0.0033 | 2026-10-29 | Use after free in Windows Update Orchestrator Service allows an authorized attacker to ele | |
CVE-2026-83883 |
high | 7.8 | 0.0038 | 2026-10-29 | Use after free in Windows Win32K allows an authorized attacker to elevate privileges local | |
CVE-2026-83881 |
high | 7.8 | 0.0038 | 2026-10-29 | Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to e | |
CVE-2026-83882 |
high | 7.8 | 0.0038 | 2026-10-29 | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate priv | |
CVE-2026-83877 |
high | 7.8 | 0.0039 | 2026-10-29 | Integer overflow or wraparound in HID Parser Library allows an authorized attacker to elev | |
CVE-2026-83879 |
high | 7.0 | 0.0023 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-83876 |
high | 7.8 | 0.0038 | 2026-10-29 | Use after free in Windows Shell allows an authorized attacker to elevate privileges locall |