Browse All CVEs
9,507 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-96854 |
medium | 5.5 | 0.0038 | 2026-10-29 | Access of resource using incompatible type ('type confusion') in Windows Device Associatio | |
CVE-2026-96853 |
medium | 4.7 | 0.0023 | 2026-10-29 | Time-of-check time-of-use (toctou) race condition in Windows Win32 Kernel Subsystem allows | |
CVE-2026-96850 |
medium | 5.5 | 0.0044 | 2026-10-29 | Use of uninitialized resource in Windows Modern Device Management (MDM) allows an authoriz | |
CVE-2026-96846 |
medium | 5.5 | 0.0038 | 2026-10-29 | Out-of-bounds read in WebDAV allows an authorized attacker to disclose information locally | |
CVE-2026-96321 |
medium | 5.5 | 0.0044 | 2026-10-29 | Out-of-bounds read in Remote Desktop Display Driver allows an authorized attacker to discl | |
CVE-2026-96300 |
medium | 5.9 | 0.0093 | 2026-10-29 | Uncontrolled resource consumption in RPC Endpoint Mapper Service allows an unauthorized at | |
CVE-2026-96206 |
medium | 5.5 | 0.0045 | 2026-10-29 | Use of uninitialized resource in Windows Subsystem for Linux allows an authorized attacker | |
CVE-2026-94520 |
medium | 4.9 | 0.0084 | 2026-10-29 | Use of externally-controlled format string in SQL Server allows an authorized attacker to | |
CVE-2026-88226 |
medium | 4.6 | 0.0051 | 2026-10-29 | Out-of-bounds read in Windows Storage Port Driver allows an unauthorized attacker to discl | |
CVE-2026-88203 |
medium | 6.5 | 0.0095 | 2026-10-29 | Untrusted pointer dereference in Microsoft Office PowerPoint allows an unauthorized attack | |
CVE-2026-88192 |
medium | 6.5 | 0.0095 | 2026-10-29 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose i | |
CVE-2026-88195 |
medium | 6.5 | 0.0081 | 2026-10-29 | Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose inf | |
CVE-2026-88190 |
medium | 6.5 | 0.0095 | 2026-10-29 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose i | |
CVE-2026-88183 |
medium | 6.5 | 0.0095 | 2026-10-29 | Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to discl | |
CVE-2026-88184 |
medium | 6.5 | 0.0081 | 2026-10-29 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose i | |
CVE-2026-88172 |
medium | 6.5 | 0.0095 | 2026-10-29 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose i | |
CVE-2026-88154 |
medium | 6.5 | 0.0095 | 2026-10-29 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose i | |
CVE-2026-88130 |
medium | 6.5 | 0.0123 | 2026-10-29 | Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a netw | |
CVE-2026-88125 |
medium | 6.5 | 0.0123 | 2026-10-29 | Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a netw | |
CVE-2026-88129 |
medium | 6.5 | 0.0123 | 2026-10-29 | Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a netw | |
CVE-2026-88123 |
medium | 6.5 | 0.0123 | 2026-10-29 | Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a netw | |
CVE-2026-88122 |
medium | 6.5 | 0.0102 | 2026-10-29 | Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a netw | |
CVE-2026-88089 |
medium | 6.7 | 0.0031 | 2026-10-29 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code loc | |
CVE-2026-88086 |
medium | 5.3 | 0.0036 | 2026-10-29 | Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information o | |
CVE-2026-88084 |
medium | 5.3 | 0.0068 | 2026-10-29 | Allocation of resources without limits or throttling in SQL Server allows an authorized at | |
CVE-2026-88085 |
medium | 6.4 | 0.0025 | 2026-10-29 | Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileg | |
CVE-2026-85932 |
medium | 6.5 | 0.0118 | 2026-10-29 | Improper limitation of a pathname to a restricted directory ('path traversal') in Microsof | |
CVE-2026-85866 |
medium | 4.7 | 0.0036 | 2026-10-29 | Exposure of sensitive system information to an unauthorized control sphere in Windows ALPC | |
CVE-2026-80092 |
medium | 5.3 | 0.0062 | 2026-10-29 | Authentication bypass by assumed-immutable data in Microsoft Identity Web allows an author | |
CVE-2026-70219 |
medium | 6.5 | 0.0095 | 2026-10-29 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose i | |
CVE-2026-70217 |
medium | 4.9 | 0.0097 | 2026-10-29 | Improper access control in Microsoft Office SharePoint allows an authorized attacker to di | |
CVE-2026-70214 |
medium | 5.5 | 0.0057 | 2026-10-29 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose i | |
CVE-2026-69922 |
medium | 6.5 | 0.0095 | 2026-10-29 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose i | |
CVE-2026-69919 |
medium | 5.5 | 0.0046 | 2026-10-29 | Out-of-bounds read in Windows Cryptographic Services allows an authorized attacker to disc | |
CVE-2026-69675 |
medium | 5.5 | 0.0047 | 2026-10-29 | Out-of-bounds read in Windows Network File System allows an authorized attacker to disclos | |
CVE-2026-109461 |
medium | 5.9 | 0.0036 | 2026-10-29 | Origin validation error in Microsoft Authentication Library (MSAL) for Node.js allows an u | |
CVE-2026-108128 |
medium | 6.5 | 0.0108 | 2026-10-29 | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information ove | |
CVE-2026-108129 |
medium | 6.5 | 0.0108 | 2026-10-29 | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information ove | |
CVE-2026-108127 |
medium | 6.5 | 0.0108 | 2026-10-29 | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information ove | |
CVE-2026-103560 |
medium | 5.5 | 0.0032 | 2026-10-29 | Improper authorization in DNS Server allows an authorized attacker to perform tampering lo | |
CVE-2026-102851 |
medium | 6.1 | 0.0027 | 2026-10-29 | Incorrect privilege assignment in Visual Studio Code allows an authorized attacker to bypa | |
CVE-2026-102206 |
medium | 6.8 | 0.0048 | 2026-10-29 | Heap-based buffer overflow in Windows Portable Device MTP Driver allows an unauthorized at | |
CVE-2026-102199 |
medium | 6.5 | 0.0094 | 2026-10-29 | Stack-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized att | |
CVE-2026-102198 |
medium | 5.3 | 0.0079 | 2026-10-29 | Out-of-bounds read in Windows Remote Desktop Protocol allows an authorized attacker to dis | |
CVE-2026-102188 |
medium | 6.8 | 0.0048 | 2026-10-29 | Untrusted pointer dereference in Windows Storage Port Driver allows an unauthorized attack | |
CVE-2026-102186 |
medium | 4.7 | 0.0037 | 2026-10-29 | Untrusted pointer dereference in Windows Network File System allows an authorized attacker | |
CVE-2026-102187 |
medium | 5.5 | 0.0046 | 2026-10-29 | Use of uninitialized resource in Windows Kernel allows an authorized attacker to disclose | |
CVE-2026-70348 |
medium | 5.5 | 0.0044 | 2026-10-29 | Improper link resolution before file access ('link following') in Windows Management Servi | |
CVE-2026-70331 |
medium | 5.4 | 0.0041 | 2026-10-29 | Improper neutralization of input used for llm prompting in Microsoft Edge for iOS allows a | |
CVE-2026-70330 |
medium | 6.7 | 0.0034 | 2026-10-29 | Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privile |