Browse All CVEs
33,082 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-72932 |
high | 7.5 | 0.0103 | 2026-10-30 | Buffer over-read in Windows Message Queuing Queue Manager allows an unauthorized attacker | |
CVE-2026-72928 |
high | 7.5 | 0.0066 | 2026-10-30 | Use after free in Windows DNS allows an authorized attacker to execute code over a network | |
CVE-2026-72931 |
medium | 4.7 | 0.0034 | 2026-10-30 | Missing release of resource after effective lifetime in Windows Secure Socket Tunneling Pr | |
CVE-2026-71352 |
high | 8.8 | 0.0091 | 2026-10-30 | Integer underflow (wrap or wraparound) in Windows Remote Access Connection Manager allows | |
CVE-2026-72927 |
medium | 6.7 | 0.0034 | 2026-10-30 | Heap-based buffer overflow in Winsock allows an authorized attacker to elevate privileges | |
CVE-2026-71342 |
high | 7.0 | 0.0026 | 2026-10-30 | Use after free in Windows Remote Access Connection Manager allows an authorized attacker t | |
CVE-2026-71349 |
medium | 6.8 | 0.0044 | 2026-10-30 | Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to exe | |
CVE-2026-70581 |
high | 7.8 | 0.0033 | 2026-10-30 | Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker | |
CVE-2026-71328 |
high | 8.8 | 0.0082 | 2026-10-30 | Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute cod | |
CVE-2026-70578 |
high | 7.0 | 0.0026 | 2026-10-30 | Heap-based buffer overflow in Windows Credential Guard allows an authorized attacker to el | |
CVE-2026-70579 |
high | 7.5 | 0.0103 | 2026-10-30 | Out-of-bounds read in Windows Mobile Broadband allows an unauthorized attacker to disclose | |
CVE-2026-70577 |
high | 7.0 | 0.0026 | 2026-10-30 | Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to | |
CVE-2026-70574 |
high | 7.8 | 0.0033 | 2026-10-30 | Out-of-bounds read in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacke | |
CVE-2026-70575 |
medium | 5.3 | 0.0095 | 2026-10-30 | Null pointer dereference in Windows Schannel allows an authorized attacker to deny service | |
CVE-2026-70572 |
high | 7.8 | 0.0033 | 2026-10-30 | Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker | |
CVE-2026-70573 |
high | 7.0 | 0.0028 | 2026-10-30 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to e | |
CVE-2026-70569 |
high | 7.8 | 0.0033 | 2026-10-30 | Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privi | |
CVE-2026-70570 |
high | 7.5 | 0.0069 | 2026-10-30 | Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker | |
CVE-2026-70567 |
high | 7.0 | 0.0026 | 2026-10-30 | Double free in Windows Display Enhancement Service allows an authorized attacker to elevat | |
CVE-2026-70568 |
high | 7.0 | 0.0026 | 2026-10-30 | Heap-based buffer overflow in Windows Defender Firewall Service allows an authorized attac | |
CVE-2026-70565 |
high | 7.0 | 0.0026 | 2026-10-30 | Use after free in Windows AF_UNIX Socket Provider allows an authorized attacker to elevate | |
CVE-2026-70296 |
critical | 9.8 | 0.0097 | 2026-10-30 | Out-of-bounds write in Windows Imaging Component allows an unauthorized attacker to execut | |
CVE-2026-70352 |
critical | 10.0 | 0.0090 | 2026-10-30 | Missing authentication for critical function in Azure AI Language allows an unauthorized a | |
CVE-2026-70145 |
medium | 5.5 | 0.0040 | 2026-10-30 | Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to | |
CVE-2026-70203 |
high | 8.8 | 0.0082 | 2026-10-30 | Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to exec | |
CVE-2026-69921 |
high | 7.8 | 0.0033 | 2026-10-30 | Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attack | |
CVE-2026-70125 |
high | 7.8 | 0.0043 | 2026-10-30 | Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to | |
CVE-2026-69910 |
critical | 9.8 | 0.0097 | 2026-10-30 | Stack-based buffer overflow in Windows Hyper-V allows an unauthorized attacker to execute | |
CVE-2026-69911 |
high | 7.0 | 0.0026 | 2026-10-30 | Use after free in Microsoft Windows Search Component allows an authorized attacker to elev | |
CVE-2026-69907 |
high | 7.8 | 0.0030 | 2026-10-30 | Improper handling of insufficient permissions or privileges in Windows Enterprise App Mana | |
CVE-2026-69904 |
low | 3.5 | 0.0058 | 2026-10-30 | Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized att | |
CVE-2026-69906 |
high | 8.2 | 0.0035 | 2026-10-30 | Heap-based buffer overflow in Windows Secure Kernel Mode allows an authorized attacker to | |
CVE-2026-69895 |
medium | 4.7 | 0.0031 | 2026-10-30 | Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose info | |
CVE-2026-69900 |
high | 7.8 | 0.0033 | 2026-10-30 | Untrusted pointer dereference in Kernel Streaming WOW Thunk Service Driver allows an autho | |
CVE-2026-69881 |
high | 7.5 | 0.0117 | 2026-10-30 | Null pointer dereference in Windows IKE Extension allows an unauthorized attacker to deny | |
CVE-2026-69891 |
high | 7.0 | 0.0026 | 2026-10-30 | Use after free in Windows Media allows an authorized attacker to elevate privileges locall | |
CVE-2026-69876 |
high | 8.0 | 0.0058 | 2026-10-30 | Use after free in Windows DHCP Server allows an authorized attacker to execute code over a | |
CVE-2026-69878 |
medium | 6.4 | 0.0028 | 2026-10-30 | Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute | |
CVE-2026-69874 |
high | 8.2 | 0.0029 | 2026-10-30 | Untrusted pointer dereference in Windows ALPC allows an authorized attacker to elevate pri | |
CVE-2026-69864 |
high | 7.8 | 0.0026 | 2026-10-30 | Use after free in Windows Hello allows an authorized attacker to elevate privileges locall | |
CVE-2026-69866 |
high | 7.0 | 0.0026 | 2026-10-30 | Use after free in Windows Device Association Service allows an authorized attacker to elev | |
CVE-2026-69854 |
critical | 9.0 | 0.0069 | 2026-10-30 | Improper authentication in Spring Cloud Azure allows an unauthorized attacker to elevate p | |
CVE-2026-69858 |
high | 8.1 | 0.0071 | 2026-10-30 | Use after free in Windows DNS allows an unauthorized attacker to execute code over a netwo | |
CVE-2026-69852 |
high | 7.5 | 0.0066 | 2026-10-30 | Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker | |
CVE-2026-69853 |
medium | 4.7 | 0.0031 | 2026-10-30 | Use of uninitialized resource in Windows Win32K allows an authorized attacker to disclose | |
CVE-2026-69847 |
high | 8.0 | 0.0058 | 2026-10-30 | Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute | |
CVE-2026-69844 |
high | 7.8 | 0.0033 | 2026-10-30 | Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges l | |
CVE-2026-69845 |
critical | 9.8 | 0.0102 | 2026-10-30 | Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execu | |
CVE-2026-69841 |
high | 7.8 | 0.0033 | 2026-10-30 | Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized at | |
CVE-2026-69843 |
critical | 10.0 | 0.0090 | 2026-10-30 | Authentication bypass by spoofing in Microsoft Fabric allows an unauthorized attacker to e |