Browse All CVEs
11,773 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-83847 |
high | 7.8 | 0.0035 | 2026-10-29 | Heap-based buffer overflow in Microsoft Account allows an authorized attacker to elevate p | |
CVE-2026-83848 |
high | 7.8 | 0.0042 | 2026-10-29 | Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized at | |
CVE-2026-83846 |
high | 7.0 | 0.0027 | 2026-10-29 | Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacke | |
CVE-2026-83844 |
high | 8.1 | 0.0073 | 2026-10-29 | Out-of-bounds read in Windows Paint allows an unauthorized attacker to execute code over a | |
CVE-2026-83845 |
high | 8.4 | 0.0033 | 2026-10-29 | Improper privilege management in Windows Internet (wininet.dll) allows an authorized attac | |
CVE-2026-83784 |
high | 8.8 | 0.0108 | 2026-10-29 | Absolute path traversal in Windows Encrypting File System (EFS) allows an authorized attac | |
CVE-2026-83785 |
high | 7.0 | 0.0033 | 2026-10-29 | Use after free in Windows COM+ Event System Service allows an authorized attacker to eleva | |
CVE-2026-83783 |
high | 7.8 | 0.0036 | 2026-10-29 | Heap-based buffer overflow in Windows Management Instrumentation allows an authorized atta | |
CVE-2026-83781 |
high | 7.8 | 0.0036 | 2026-10-29 | Improper null termination in Windows Program Compatibility Assistant Service allows an aut | |
CVE-2026-83779 |
high | 7.8 | 0.0036 | 2026-10-29 | Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate p | |
CVE-2026-83777 |
high | 8.8 | 0.0062 | 2026-10-29 | Heap-based buffer overflow in Windows Bluetooth Service allows an unauthorized attacker to | |
CVE-2026-83778 |
high | 8.8 | 0.0091 | 2026-10-29 | Heap-based buffer overflow in Microsoft Internet Messaging API allows an unauthorized atta | |
CVE-2026-83775 |
high | 7.0 | 0.0024 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-83771 |
high | 8.8 | 0.0062 | 2026-10-29 | Use after free in Windows Camera Frame Server Monitor allows an unauthorized attacker to e | |
CVE-2026-83769 |
high | 7.8 | 0.0042 | 2026-10-29 | Use after free in OpenSSH for Windows allows an authorized attacker to elevate privileges | |
CVE-2026-83767 |
high | 7.8 | 0.0031 | 2026-10-29 | Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate | |
CVE-2026-83768 |
high | 7.8 | 0.0040 | 2026-10-29 | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate priv | |
CVE-2026-83762 |
high | 7.8 | 0.0036 | 2026-10-29 | Use after free in Windows Win32K allows an authorized attacker to elevate privileges local | |
CVE-2026-83763 |
high | 7.8 | 0.0040 | 2026-10-29 | Access of resource using incompatible type ('type confusion') in Windows Input System allo | |
CVE-2026-83761 |
high | 7.8 | 0.0042 | 2026-10-29 | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate | |
CVE-2026-83758 |
high | 7.8 | 0.0036 | 2026-10-29 | Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to exe | |
CVE-2026-83759 |
high | 8.8 | 0.0092 | 2026-10-29 | Improper control of generation of code ('code injection') in Windows Encrypting File Syste | |
CVE-2026-83757 |
high | 7.8 | 0.0036 | 2026-10-29 | Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate priv | |
CVE-2026-83756 |
high | 7.8 | 0.0032 | 2026-10-29 | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate | |
CVE-2026-83753 |
high | 7.8 | 0.0036 | 2026-10-29 | Heap-based buffer overflow in Windows Camera Frame Server Monitor allows an authorized att | |
CVE-2026-83754 |
high | 7.5 | 0.0068 | 2026-10-29 | Heap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacker to execu | |
CVE-2026-83752 |
high | 7.0 | 0.0026 | 2026-10-29 | Use after free in Windows Installer allows an authorized attacker to elevate privileges lo | |
CVE-2026-83750 |
high | 7.0 | 0.0023 | 2026-10-29 | Time-of-check time-of-use (toctou) race condition in Windows Error Reporting allows an aut | |
CVE-2026-83751 |
high | 7.0 | 0.0029 | 2026-10-29 | Use after free in Windows MIDI Service Module allows an authorized attacker to elevate pri | |
CVE-2026-83749 |
high | 7.0 | 0.0026 | 2026-10-29 | Use after free in Windows Overlay Filter allows an authorized attacker to elevate privileg | |
CVE-2026-83746 |
high | 8.1 | 0.0115 | 2026-10-29 | Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized atta | |
CVE-2026-83741 |
high | 7.8 | 0.0027 | 2026-10-29 | Use after free in Internet Explorer allows an authorized attacker to elevate privileges lo | |
CVE-2026-83739 |
high | 7.5 | 0.0048 | 2026-10-29 | Use after free in Windows Bluetooth Service allows an unauthorized attacker to execute cod | |
CVE-2026-83740 |
high | 7.0 | 0.0029 | 2026-10-29 | Use after free in Windows Hello allows an authorized attacker to elevate privileges locall | |
CVE-2026-83738 |
high | 7.0 | 0.0030 | 2026-10-29 | Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attac | |
CVE-2026-83735 |
high | 7.8 | 0.0043 | 2026-10-29 | Release of invalid pointer or reference in Windows Kernel allows an authorized attacker to | |
CVE-2026-83728 |
high | 8.8 | 0.0031 | 2026-10-29 | Improper validation of syntactic correctness of input in Windows Hyper-V allows an authori | |
CVE-2026-83732 |
high | 7.8 | 0.0039 | 2026-10-29 | Use after free in Windows Win32K allows an authorized attacker to elevate privileges local | |
CVE-2026-83726 |
high | 7.8 | 0.0036 | 2026-10-29 | Use after free in Windows DWM Core Library allows an authorized attacker to elevate privil | |
CVE-2026-83727 |
high | 7.8 | 0.0036 | 2026-10-29 | Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privil | |
CVE-2026-83724 |
high | 7.0 | 0.0028 | 2026-10-29 | Heap-based buffer overflow in Windows Management Instrumentation allows an authorized atta | |
CVE-2026-83725 |
high | 8.8 | 0.0078 | 2026-10-29 | Heap-based buffer overflow in Microsoft Windows Search Component allows an unauthorized at | |
CVE-2026-83721 |
high | 7.8 | 0.0036 | 2026-10-29 | Use after free in Windows Win32K allows an authorized attacker to elevate privileges local | |
CVE-2026-83722 |
high | 7.0 | 0.0023 | 2026-10-29 | Use after free in Microsoft Local Security Authority Server (lsasrv) allows an authorized | |
CVE-2026-83720 |
high | 7.0 | 0.0029 | 2026-10-29 | Use after free in Windows Kerberos allows an authorized attacker to elevate privileges loc | |
CVE-2026-83717 |
high | 7.0 | 0.0030 | 2026-10-29 | Use after free in Windows Installer allows an authorized attacker to elevate privileges lo | |
CVE-2026-83718 |
high | 7.0 | 0.0029 | 2026-10-29 | Use after free in Windows Installer allows an authorized attacker to elevate privileges lo | |
CVE-2026-83716 |
high | 8.8 | 0.0036 | 2026-10-29 | Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute cod | |
CVE-2026-83715 |
high | 7.1 | 0.0033 | 2026-10-29 | Missing authentication for critical function in Windows Error Reporting allows an authoriz | |
CVE-2026-83712 |
high | 7.8 | 0.0036 | 2026-10-29 | Out-of-bounds write in Windows NTFS allows an authorized attacker to execute code locally. |