Browse All CVEs
33,082 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-73013 |
high | 8.8 | 0.0082 | 2026-10-30 | Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to | |
CVE-2026-73010 |
critical | 9.8 | 0.0097 | 2026-10-30 | Use after free in Windows Failover Cluster allows an unauthorized attacker to execute code | |
CVE-2026-73011 |
high | 7.8 | 0.0033 | 2026-10-30 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to e | |
CVE-2026-73008 |
medium | 5.5 | 0.0048 | 2026-10-30 | Exposure of private personal information to an unauthorized actor in Windows Biometric Ser | |
CVE-2026-73009 |
critical | 9.8 | 0.0097 | 2026-10-30 | Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized a | |
CVE-2026-73007 |
high | 7.8 | 0.0033 | 2026-10-30 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to e | |
CVE-2026-73005 |
high | 7.0 | 0.0020 | 2026-10-30 | Use after free in Windows Authentication Methods allows an authorized attacker to elevate | |
CVE-2026-73006 |
high | 8.8 | 0.0082 | 2026-10-30 | Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacke | |
CVE-2026-73003 |
high | 7.0 | 0.0026 | 2026-10-30 | Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to | |
CVE-2026-73004 |
medium | 5.5 | 0.0030 | 2026-10-30 | Missing authentication for critical function in Windows Autopilot allows an authorized att | |
CVE-2026-73001 |
high | 7.8 | 0.0033 | 2026-10-30 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to e | |
CVE-2026-73002 |
high | 7.8 | 0.0033 | 2026-10-30 | Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker | |
CVE-2026-72999 |
medium | 6.8 | 0.0044 | 2026-10-30 | Out-of-bounds read in Windows USB Hub Driver allows an unauthorized attacker to elevate pr | |
CVE-2026-73000 |
high | 7.8 | 0.0033 | 2026-10-30 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to e | |
CVE-2026-72997 |
high | 7.8 | 0.0033 | 2026-10-30 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to e | |
CVE-2026-72995 |
high | 7.8 | 0.0033 | 2026-10-30 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to e | |
CVE-2026-72996 |
high | 7.8 | 0.0033 | 2026-10-30 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to e | |
CVE-2026-72993 |
high | 7.8 | 0.0033 | 2026-10-30 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to e | |
CVE-2026-72994 |
high | 7.8 | 0.0033 | 2026-10-30 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to e | |
CVE-2026-72991 |
high | 7.8 | 0.0033 | 2026-10-30 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to e | |
CVE-2026-72992 |
high | 7.8 | 0.0033 | 2026-10-30 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to e | |
CVE-2026-72989 |
high | 7.5 | 0.0103 | 2026-10-30 | Use of uninitialized resource in Windows Failover Cluster allows an unauthorized attacker | |
CVE-2026-72990 |
high | 7.8 | 0.0033 | 2026-10-30 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to e | |
CVE-2026-72988 |
high | 7.8 | 0.0033 | 2026-10-30 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to e | |
CVE-2026-72985 |
medium | 6.8 | 0.0044 | 2026-10-30 | Heap-based buffer overflow in Windows Volume Shadow Copy allows an unauthorized attacker t | |
CVE-2026-72987 |
high | 8.1 | 0.0071 | 2026-10-30 | Use after free in Windows DNS allows an unauthorized attacker to execute code over a netwo | |
CVE-2026-72976 |
medium | 5.0 | 0.0051 | 2026-10-30 | Out-of-bounds read in Microsoft Office Word allows an authorized attacker to disclose info | |
CVE-2026-72977 |
medium | 6.5 | 0.0097 | 2026-10-30 | Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to discl | |
CVE-2026-72974 |
medium | 6.5 | 0.0092 | 2026-10-30 | Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose inf | |
CVE-2026-72975 |
medium | 6.5 | 0.0092 | 2026-10-30 | Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to discl | |
CVE-2026-72972 |
high | 8.8 | 0.0082 | 2026-10-30 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to exe | |
CVE-2026-72973 |
high | 8.8 | 0.0082 | 2026-10-30 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to exe | |
CVE-2026-72966 |
medium | 5.5 | 0.0030 | 2026-10-30 | Missing authorization in Windows Remote Access Connection Manager allows an authorized att | |
CVE-2026-72967 |
high | 7.8 | 0.0033 | 2026-10-30 | Heap-based buffer overflow in Windows Network Connection Broker allows an authorized attac | |
CVE-2026-72965 |
high | 7.8 | 0.0033 | 2026-10-30 | Use after free in Windows WebClient Service allows an authorized attacker to elevate privi | |
CVE-2026-72961 |
high | 8.2 | 0.0035 | 2026-10-30 | Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges | |
CVE-2026-72964 |
medium | 5.5 | 0.0030 | 2026-10-30 | Missing authentication for critical function in Windows Internet Connection Sharing (ICS) | |
CVE-2026-72959 |
high | 8.8 | 0.0091 | 2026-10-30 | Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker | |
CVE-2026-72960 |
high | 8.8 | 0.0082 | 2026-10-30 | Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to exec | |
CVE-2026-72956 |
medium | 6.5 | 0.0092 | 2026-10-30 | Untrusted pointer dereference in Microsoft Office PowerPoint allows an unauthorized attack | |
CVE-2026-72957 |
high | 7.8 | 0.0033 | 2026-10-30 | Heap-based buffer overflow in Windows Deployment Services allows an authorized attacker to | |
CVE-2026-72954 |
high | 7.5 | 0.0066 | 2026-10-30 | Use after free in Windows Deployment Services allows an authorized attacker to execute cod | |
CVE-2026-72952 |
high | 7.0 | 0.0026 | 2026-10-30 | Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to execute code | |
CVE-2026-72953 |
high | 7.8 | 0.0033 | 2026-10-30 | Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate | |
CVE-2026-72942 |
medium | 6.5 | 0.0092 | 2026-10-30 | Out-of-bounds read in Windows Spaceport.sys allows an unauthorized attacker to disclose in | |
CVE-2026-72950 |
high | 8.8 | 0.0092 | 2026-10-30 | Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker | |
CVE-2026-72938 |
medium | 6.5 | 0.0092 | 2026-10-30 | Access of resource using incompatible type ('type confusion') in Microsoft Office PowerPoi | |
CVE-2026-72941 |
high | 7.8 | 0.0033 | 2026-10-30 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to e | |
CVE-2026-72933 |
high | 8.8 | 0.0082 | 2026-10-30 | Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorize | |
CVE-2026-72936 |
high | 8.1 | 0.0071 | 2026-10-30 | Use after free in Windows SMB Client allows an unauthorized attacker to execute code over |