Browse All CVEs
14,341 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-70177 |
high | 7.8 | 0.0035 | 2026-10-29 | Numeric truncation error in Microsoft Windows Search Component allows an authorized attack | |
CVE-2026-70179 |
high | 7.5 | 0.0063 | 2026-10-29 | Authentication bypass by spoofing in ASP.NET Core allows an authorized attacker to elevate | |
CVE-2026-70184 |
high | 7.8 | 0.0042 | 2026-10-29 | Improper resolution of path equivalence in Windows Backup Engine allows an authorized atta | |
CVE-2026-70185 |
high | 8.8 | 0.0030 | 2026-10-29 | Protection mechanism failure in Windows PowerShell allows an authorized attacker to bypass | |
CVE-2026-70190 |
high | 7.3 | 0.0049 | 2026-10-29 | Improper link resolution before file access ('link following') in .NET allows an authorize | |
CVE-2026-70197 |
high | 8.1 | 0.0079 | 2026-10-29 | Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network | |
CVE-2026-70205 |
high | 7.0 | 0.0030 | 2026-10-29 | Access of resource using incompatible type ('type confusion') in Windows Ancillary Functio | |
CVE-2026-70207 |
high | 7.5 | 0.0075 | 2026-10-29 | Heap-based buffer overflow in Network Policy Server (NPS) allows an authorized attacker to | |
CVE-2026-70209 |
high | 7.0 | 0.0030 | 2026-10-29 | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate | |
CVE-2026-70210 |
high | 8.8 | 0.0093 | 2026-10-29 | Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to elevate pr | |
CVE-2026-70212 |
high | 7.0 | 0.0027 | 2026-10-29 | Improper restriction of communication channel to intended endpoints in Windows Security Ce | |
CVE-2026-70218 |
high | 7.8 | 0.0035 | 2026-10-29 | Insufficient granularity of access control in Windows StateRepository API allows an author | |
CVE-2026-70222 |
high | 7.8 | 0.0039 | 2026-10-29 | Relative path traversal in Windows Shell allows an authorized attacker to elevate privileg | |
CVE-2026-70223 |
high | 7.0 | 0.0031 | 2026-10-29 | Use after free in Windows Console Driver allows an authorized attacker to elevate privileg | |
CVE-2026-70225 |
high | 7.8 | 0.0038 | 2026-10-29 | Access of resource using incompatible type ('type confusion') in Windows Ancillary Functio | |
CVE-2026-70228 |
high | 7.8 | 0.0036 | 2026-10-29 | Out-of-bounds read in Desktop Window Manager allows an authorized attacker to elevate priv | |
CVE-2026-70229 |
high | 8.1 | 0.0104 | 2026-10-29 | Incorrect authorization in Active Directory Domain Services allows an unauthorized attacke | |
CVE-2026-70230 |
high | 7.0 | 0.0030 | 2026-10-29 | Use after free in Windows Audio Service allows an authorized attacker to elevate privilege | |
CVE-2026-70233 |
high | 7.8 | 0.0048 | 2026-10-29 | Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized a | |
CVE-2026-70236 |
high | 7.0 | 0.0031 | 2026-10-29 | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate | |
CVE-2026-70237 |
high | 7.0 | 0.0032 | 2026-10-29 | Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attac | |
CVE-2026-70238 |
high | 7.8 | 0.0035 | 2026-10-29 | Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attac | |
CVE-2026-70241 |
high | 7.0 | 0.0030 | 2026-10-29 | Use after free in Windows Kerberos allows an authorized attacker to elevate privileges loc | |
CVE-2026-70243 |
high | 7.0 | 0.0030 | 2026-10-29 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges local | |
CVE-2026-70245 |
high | 7.8 | 0.0042 | 2026-10-29 | Access of resource using incompatible type ('type confusion') in Windows Ancillary Functio | |
CVE-2026-70247 |
high | 7.8 | 0.0034 | 2026-10-29 | Out-of-bounds read in Windows HTTP.sys allows an authorized attacker to execute code local | |
CVE-2026-70249 |
high | 7.0 | 0.0033 | 2026-10-29 | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate | |
CVE-2026-70250 |
high | 8.8 | 0.0047 | 2026-10-29 | Use after free in Windows DHCP Client allows an unauthorized attacker to execute code over | |
CVE-2026-70252 |
high | 7.0 | 0.0028 | 2026-10-29 | Use after free in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to | |
CVE-2026-70253 |
high | 7.0 | 0.0033 | 2026-10-29 | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate | |
CVE-2026-70255 |
high | 7.8 | 0.0039 | 2026-10-29 | Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elev | |
CVE-2026-70258 |
high | 8.8 | 0.0093 | 2026-10-29 | Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized at | |
CVE-2026-70262 |
high | 8.8 | 0.0093 | 2026-10-29 | Heap-based buffer overflow in WebDAV allows an unauthorized attacker to elevate privileges | |
CVE-2026-70271 |
high | 7.0 | 0.0033 | 2026-10-29 | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate | |
CVE-2026-70272 |
high | 7.0 | 0.0028 | 2026-10-29 | Use after free in Windows Installer allows an authorized attacker to elevate privileges lo | |
CVE-2026-70273 |
high | 7.0 | 0.0031 | 2026-10-29 | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate | |
CVE-2026-70274 |
high | 7.8 | 0.0035 | 2026-10-29 | Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate priv | |
CVE-2026-70275 |
high | 8.8 | 0.0093 | 2026-10-29 | Untrusted pointer dereference in Windows CD-ROM Driver allows an unauthorized attacker to | |
CVE-2026-70278 |
high | 7.8 | 0.0030 | 2026-10-29 | Heap-based buffer overflow in Microsoft Windows Media Foundation allows an authorized atta | |
CVE-2026-70286 |
high | 7.8 | 0.0041 | 2026-10-29 | Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to eleva | |
CVE-2026-70299 |
high | 8.8 | 0.0034 | 2026-10-29 | Improper access control in Windows Bind Filter Driver allows an authorized attacker to ele | |
CVE-2026-70566 |
high | 7.8 | 0.0038 | 2026-10-29 | Null pointer dereference in Windows Schannel allows an authorized attacker to elevate priv | |
CVE-2026-70580 |
high | 8.8 | 0.0034 | 2026-10-29 | Missing authentication for critical function in Windows Credential Guard allows an authori | |
CVE-2026-72934 |
high | 7.0 | 0.0030 | 2026-10-29 | Use after free in Windows Program Compatibility Assistant Service allows an authorized att | |
CVE-2026-72955 |
high | 7.0 | 0.0031 | 2026-10-29 | Use after free in Windows Application Compatibility Cache allows an authorized attacker to | |
CVE-2026-72968 |
high | 7.0 | 0.0030 | 2026-10-29 | Use after free in Windows Program Compatibility Assistant Service allows an authorized att | |
CVE-2026-72969 |
high | 7.0 | 0.0030 | 2026-10-29 | Use after free in Windows Program Compatibility Assistant Service allows an authorized att | |
CVE-2026-73027 |
high | 7.8 | 0.0052 | 2026-10-29 | External control of system or configuration setting in Windows Setup Files Cleanup allows | |
CVE-2026-77496 |
high | 8.8 | 0.0093 | 2026-10-29 | Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to | |
CVE-2026-78459 |
high | 7.8 | 0.0036 | 2026-10-29 | Heap-based buffer overflow in Windows Internet Information Services allows an authorized a |