Browse All CVEs
14,315 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-85911 |
high | 7.8 | 0.0035 | 2026-10-29 | Use after free in Windows StateRepository API allows an authorized attacker to elevate pri | |
CVE-2026-85912 |
high | 7.0 | 0.0019 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-85927 |
high | 7.8 | 0.0031 | 2026-10-29 | Heap-based buffer overflow in Windows Universal Plug and Play (UPnP) Device Host allows an | |
CVE-2026-85930 |
high | 7.0 | 0.0020 | 2026-10-29 | Use after free in Windows Image Acquisition allows an authorized attacker to elevate privi | |
CVE-2026-85931 |
high | 8.8 | 0.0085 | 2026-10-29 | Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized a | |
CVE-2026-85933 |
high | 7.8 | 0.0024 | 2026-10-29 | Use after free in Windows Print Spooler Components allows an authorized attacker to elevat | |
CVE-2026-85934 |
high | 7.0 | 0.0025 | 2026-10-29 | Use after free in Windows AppX Deployment Service allows an authorized attacker to elevate | |
CVE-2026-85936 |
high | 8.8 | 0.0054 | 2026-10-29 | Double free in Windows Shell allows an unauthorized attacker to execute code over a networ | |
CVE-2026-85941 |
high | 7.0 | 0.0023 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-85945 |
high | 7.8 | 0.0036 | 2026-10-29 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges local | |
CVE-2026-87691 |
high | 7.8 | 0.0024 | 2026-10-29 | Use after free in Windows Management Services allows an authorized attacker to elevate pri | |
CVE-2026-87693 |
high | 7.0 | 0.0025 | 2026-10-29 | Use after free in Windows Installer allows an authorized attacker to elevate privileges lo | |
CVE-2026-87694 |
high | 7.8 | 0.0035 | 2026-10-29 | Use after free in Windows Installer allows an authorized attacker to elevate privileges lo | |
CVE-2026-87695 |
high | 7.8 | 0.0029 | 2026-10-29 | Inclusion of functionality from untrusted control sphere in Microsoft Exchange Server allo | |
CVE-2026-87696 |
high | 7.5 | 0.0042 | 2026-10-29 | Improper verification of cryptographic signature in Microsoft Exchange Server allows an au | |
CVE-2026-87697 |
high | 8.8 | 0.0084 | 2026-10-29 | Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code | |
CVE-2026-87699 |
high | 7.8 | 0.0035 | 2026-10-29 | Heap-based buffer overflow in Winlogon allows an authorized attacker to elevate privileges | |
CVE-2026-87700 |
high | 7.8 | 0.0030 | 2026-10-29 | Use after free in Windows Installer allows an authorized attacker to elevate privileges lo | |
CVE-2026-87702 |
high | 7.8 | 0.0035 | 2026-10-29 | Integer overflow or wraparound in Windows Resource Management (MRM) allows an authorized a | |
CVE-2026-87704 |
high | 7.0 | 0.0025 | 2026-10-29 | Use after free in Windows Installer allows an authorized attacker to elevate privileges lo | |
CVE-2026-87705 |
high | 7.4 | 0.0043 | 2026-10-29 | Improper verification of source of a communication channel in Windows Hyper-V allows an un | |
CVE-2026-87706 |
high | 7.8 | 0.0024 | 2026-10-29 | Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attac | |
CVE-2026-87707 |
high | 7.8 | 0.0024 | 2026-10-29 | Heap-based buffer overflow in Windows Fax and Scan Service allows an authorized attacker t | |
CVE-2026-87708 |
high | 7.0 | 0.0025 | 2026-10-29 | Use after free in Windows Installer allows an authorized attacker to elevate privileges lo | |
CVE-2026-88106 |
high | 7.0 | 0.0020 | 2026-10-29 | Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to | |
CVE-2026-88107 |
high | 7.0 | 0.0015 | 2026-10-29 | Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to | |
CVE-2026-88110 |
high | 7.0 | 0.0028 | 2026-10-29 | Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to ele | |
CVE-2026-88113 |
high | 7.0 | 0.0025 | 2026-10-29 | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elev | |
CVE-2026-88115 |
high | 8.8 | 0.0070 | 2026-10-29 | Out-of-bounds read in Windows Server for NFS allows an unauthorized attacker to execute co | |
CVE-2026-88117 |
high | 8.1 | 0.0070 | 2026-10-29 | Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over | |
CVE-2026-88118 |
high | 7.8 | 0.0041 | 2026-10-29 | Integer overflow or wraparound in Windows Background Intelligent Transfer Service (BITS) a | |
CVE-2026-88119 |
high | 8.1 | 0.0076 | 2026-10-29 | Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over | |
CVE-2026-88120 |
high | 8.1 | 0.0076 | 2026-10-29 | Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over | |
CVE-2026-88121 |
high | 8.0 | 0.0116 | 2026-10-29 | Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unautho | |
CVE-2026-88124 |
high | 7.0 | 0.0025 | 2026-10-29 | Use after free in Windows Installer allows an authorized attacker to elevate privileges lo | |
CVE-2026-88127 |
high | 7.0 | 0.0028 | 2026-10-29 | Use after free in Windows SMB Server allows an authorized attacker to elevate privileges l | |
CVE-2026-88128 |
high | 7.8 | 0.0035 | 2026-10-29 | Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to el | |
CVE-2026-88133 |
high | 7.8 | 0.0054 | 2026-10-29 | Improper authorization in Windows Portable Device Enumerator Service allows an authorized | |
CVE-2026-88134 |
high | 7.8 | 0.0035 | 2026-10-29 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges local | |
CVE-2026-88139 |
high | 7.0 | 0.0025 | 2026-10-29 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges local | |
CVE-2026-88141 |
high | 7.0 | 0.0025 | 2026-10-29 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges local | |
CVE-2026-88142 |
high | 8.8 | 0.0085 | 2026-10-29 | Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unautho | |
CVE-2026-88146 |
high | 7.0 | 0.0019 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-88147 |
high | 7.8 | 0.0034 | 2026-10-29 | Heap-based buffer overflow in Windows Secure Socket Tunneling Protocol (SSTP) allows an au | |
CVE-2026-88149 |
high | 7.0 | 0.0020 | 2026-10-29 | Double free in Windows Ancillary Function Driver for WinSock allows an authorized attacker | |
CVE-2026-88152 |
high | 7.8 | 0.0035 | 2026-10-29 | Use after free in Windows Background Intelligent Transfer Service (BITS) allows an authori | |
CVE-2026-88157 |
high | 8.8 | 0.0052 | 2026-10-29 | Heap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacker to execu | |
CVE-2026-88159 |
high | 8.8 | 0.0142 | 2026-10-29 | Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unautho | |
CVE-2026-96222 |
high | 7.4 | 0.0059 | 2026-10-29 | Improper certificate validation in Active Directory Federation Services (AD FS) allows an | |
CVE-2026-96224 |
high | 8.8 | 0.0076 | 2026-10-29 | Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network |