Browse All CVEs
14,354 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-108464 |
high | 7.0 | 0.0028 | 2026-10-29 | Use after free in Software Protection Platform (SPP) allows an authorized attacker to elev | |
CVE-2026-108465 |
high | 7.0 | 0.0028 | 2026-10-29 | Use after free in Windows Update Delivery Optimization allows an authorized attacker to el | |
CVE-2026-108467 |
high | 8.8 | 0.0100 | 2026-10-29 | Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an authorized att | |
CVE-2026-108468 |
high | 7.0 | 0.0028 | 2026-10-29 | Use after free in Windows Installer allows an authorized attacker to elevate privileges lo | |
CVE-2026-108471 |
high | 8.8 | 0.0037 | 2026-10-29 | Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allow | |
CVE-2026-109428 |
high | 8.7 | 0.0051 | 2026-10-29 | Mistral Vibe before 2.25.5 contains a permission validation bypass vulnerability that allo | |
CVE-2026-109453 |
high | 7.0 | 0.0028 | 2026-10-29 | Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized | |
CVE-2026-110111 |
high | 7.7 | 0.0062 | 2026-10-29 | Xen Orchestra before 6.9.0 contains an improper access control vulnerability that allows a | |
CVE-2026-110205 |
high | 7.7 | 0.0051 | 2026-10-29 | Roo Code through 3.54.0 contains a command approval bypass vulnerability in parseCommandLi | |
CVE-2026-110215 |
high | 8.7 | 0.0047 | 2026-10-29 | youlai-boot through 2.21.1 contains a missing authorization vulnerability that allows auth | |
CVE-2026-110220 |
high | 7.1 | 0.0035 | 2026-10-29 | Kubeflow Model Registry through 0.3.17 contains a server-side request forgery vulnerabilit | |
CVE-2026-110236 |
high | 7.1 | 0.0105 | 2026-10-29 | KDE Dolphin 24.08.0 through 26.08.2 contains an OS command injection vulnerability that al | |
CVE-2026-110247 |
high | 8.4 | 0.0018 | 2026-10-29 | Several buffer-growth sites in libmime performed size arithmetic in 32-bit types without o | |
CVE-2026-49785 |
high | 7.8 | 0.0038 | 2026-10-29 | Improper resource shutdown or release in Windows UEFI allows an authorized attacker to byp | |
CVE-2026-58280 |
high | 7.5 | 0.0125 | 2026-10-29 | Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a netw | |
CVE-2026-61931 |
high | 7.8 | 0.0038 | 2026-10-29 | Use after free in Windows Perception Simulation Service allows an authorized attacker to e | |
CVE-2026-68836 |
high | 7.8 | 0.0038 | 2026-10-29 | Heap-based buffer overflow in Windows kernel32.dll allows an authorized attacker to elevat | |
CVE-2026-69326 |
high | 8.8 | 0.0077 | 2026-10-29 | Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute cod | |
CVE-2026-69354 |
high | 7.8 | 0.0038 | 2026-10-29 | Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to ele | |
CVE-2026-69363 |
high | 8.0 | 0.0075 | 2026-10-29 | Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to ele | |
CVE-2026-69387 |
high | 7.0 | 0.0030 | 2026-10-29 | Use after free in Windows Error Reporting allows an authorized attacker to elevate privile | |
CVE-2026-69452 |
high | 7.1 | 0.0066 | 2026-10-29 | Use after free in Windows Enterprise App Management allows an authorized attacker to eleva | |
CVE-2026-69471 |
high | 7.8 | 0.0038 | 2026-10-29 | Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate p | |
CVE-2026-69521 |
high | 8.8 | 0.0080 | 2026-10-29 | Integer overflow or wraparound in Windows iSCSI allows an unauthorized attacker to execute | |
CVE-2026-69577 |
high | 7.5 | 0.0107 | 2026-10-29 | Out-of-bounds read in Microsoft Azure Attestation service and Device Health Attestation Se | |
CVE-2026-69596 |
high | 7.0 | 0.0030 | 2026-10-29 | Use after free in Windows Program Compatibility Assistant Service allows an authorized att | |
CVE-2026-69633 |
high | 7.8 | 0.0038 | 2026-10-29 | Heap-based buffer overflow in Windows Update allows an authorized attacker to elevate priv | |
CVE-2026-69650 |
high | 7.8 | 0.0025 | 2026-10-29 | Improper verification of cryptographic signature in Windows Key Distribution Center allows | |
CVE-2026-69651 |
high | 7.5 | 0.0125 | 2026-10-29 | Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service | |
CVE-2026-69673 |
high | 7.8 | 0.0051 | 2026-10-29 | Improper link resolution before file access ('link following') in Windows Update allows an | |
CVE-2026-69718 |
high | 7.8 | 0.0044 | 2026-10-29 | Improper neutralization of special elements used in a command ('command injection') in Win | |
CVE-2026-69733 |
high | 7.8 | 0.0063 | 2026-10-29 | Untrusted search path in Windows Update allows an authorized attacker to elevate privilege | |
CVE-2026-69743 |
high | 7.0 | 0.0030 | 2026-10-29 | Use after free in Windows Program Compatibility Assistant Service allows an authorized att | |
CVE-2026-69763 |
high | 7.0 | 0.0023 | 2026-10-29 | Use after free in Windows Storage allows an authorized attacker to elevate privileges loca | |
CVE-2026-69765 |
high | 8.8 | 0.0080 | 2026-10-29 | Use after free in Windows Storport Miniport Driver allows an unauthorized attacker to exec | |
CVE-2026-69766 |
high | 7.0 | 0.0023 | 2026-10-29 | Use after free in Windows Storage allows an authorized attacker to elevate privileges loca | |
CVE-2026-69783 |
high | 7.8 | 0.0063 | 2026-10-29 | External control of file name or path in Windows Update allows an authorized attacker to e | |
CVE-2026-69789 |
high | 7.5 | 0.0046 | 2026-10-29 | Heap-based buffer overflow in Reliable Multicast Transport Driver (RMCAST) allows an unaut | |
CVE-2026-69795 |
high | 7.0 | 0.0030 | 2026-10-29 | Null pointer dereference in Windows Clipboard Server allows an authorized attacker to elev | |
CVE-2026-69798 |
high | 7.8 | 0.0038 | 2026-10-29 | Use after free in Windows Wired AutoConfig Service allows an authorized attacker to elevat | |
CVE-2026-69802 |
high | 8.1 | 0.0063 | 2026-10-29 | Weak authentication in Network Device Enrollment Service (NDES) allows an unauthorized att | |
CVE-2026-69830 |
high | 8.1 | 0.0048 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-69840 |
high | 7.0 | 0.0027 | 2026-10-29 | Use after free in Windows Certificates allows an authorized attacker to elevate privileges | |
CVE-2026-69850 |
high | 7.8 | 0.0038 | 2026-10-29 | Untrusted pointer dereference in Windows Certificates allows an authorized attacker to ele | |
CVE-2026-69856 |
high | 7.0 | 0.0023 | 2026-10-29 | Use after free in Windows Storage allows an authorized attacker to elevate privileges loca | |
CVE-2026-69884 |
high | 7.8 | 0.0038 | 2026-10-29 | Buffer over-read in Windows GDI allows an authorized attacker to elevate privileges locall | |
CVE-2026-69970 |
high | 7.0 | 0.0027 | 2026-10-29 | Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to | |
CVE-2026-69976 |
high | 7.5 | 0.0063 | 2026-10-29 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code ov | |
CVE-2026-69977 |
high | 7.0 | 0.0030 | 2026-10-29 | Use after free in Quality Windows Audio/Video Experience (QWAVE) service allows an authori | |
CVE-2026-69984 |
high | 7.5 | 0.0063 | 2026-10-29 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code ov |