Browse All CVEs
33,101 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-69906 |
high | 8.2 | 0.0035 | 2026-10-30 | Heap-based buffer overflow in Windows Secure Kernel Mode allows an authorized attacker to | |
CVE-2026-69895 |
medium | 4.7 | 0.0031 | 2026-10-30 | Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose info | |
CVE-2026-69900 |
high | 7.8 | 0.0033 | 2026-10-30 | Untrusted pointer dereference in Kernel Streaming WOW Thunk Service Driver allows an autho | |
CVE-2026-69881 |
high | 7.5 | 0.0117 | 2026-10-30 | Null pointer dereference in Windows IKE Extension allows an unauthorized attacker to deny | |
CVE-2026-69891 |
high | 7.0 | 0.0026 | 2026-10-30 | Use after free in Windows Media allows an authorized attacker to elevate privileges locall | |
CVE-2026-69876 |
high | 8.0 | 0.0058 | 2026-10-30 | Use after free in Windows DHCP Server allows an authorized attacker to execute code over a | |
CVE-2026-69878 |
medium | 6.4 | 0.0028 | 2026-10-30 | Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute | |
CVE-2026-69874 |
high | 8.2 | 0.0029 | 2026-10-30 | Untrusted pointer dereference in Windows ALPC allows an authorized attacker to elevate pri | |
CVE-2026-69864 |
high | 7.8 | 0.0026 | 2026-10-30 | Use after free in Windows Hello allows an authorized attacker to elevate privileges locall | |
CVE-2026-69866 |
high | 7.0 | 0.0026 | 2026-10-30 | Use after free in Windows Device Association Service allows an authorized attacker to elev | |
CVE-2026-69854 |
critical | 9.0 | 0.0069 | 2026-10-30 | Improper authentication in Spring Cloud Azure allows an unauthorized attacker to elevate p | |
CVE-2026-69858 |
high | 8.1 | 0.0071 | 2026-10-30 | Use after free in Windows DNS allows an unauthorized attacker to execute code over a netwo | |
CVE-2026-69852 |
high | 7.5 | 0.0066 | 2026-10-30 | Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker | |
CVE-2026-69853 |
medium | 4.7 | 0.0031 | 2026-10-30 | Use of uninitialized resource in Windows Win32K allows an authorized attacker to disclose | |
CVE-2026-69847 |
high | 8.0 | 0.0058 | 2026-10-30 | Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute | |
CVE-2026-69844 |
high | 7.8 | 0.0033 | 2026-10-30 | Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges l | |
CVE-2026-69845 |
critical | 9.8 | 0.0102 | 2026-10-30 | Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execu | |
CVE-2026-69841 |
high | 7.8 | 0.0033 | 2026-10-30 | Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized at | |
CVE-2026-69843 |
critical | 10.0 | 0.0090 | 2026-10-30 | Authentication bypass by spoofing in Microsoft Fabric allows an unauthorized attacker to e | |
CVE-2026-69829 |
critical | 9.8 | 0.0097 | 2026-10-30 | Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute cod | |
CVE-2026-69834 |
high | 7.0 | 0.0026 | 2026-10-30 | Use after free in Windows ALPC allows an authorized attacker to elevate privileges locally | |
CVE-2026-69826 |
high | 8.0 | 0.0077 | 2026-10-30 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to e | |
CVE-2026-69821 |
high | 7.8 | 0.0033 | 2026-10-30 | Improper encoding or escaping of output in Active Directory Certificate Services (AD CS) a | |
CVE-2026-69824 |
critical | 9.8 | 0.0097 | 2026-10-30 | Integer underflow (wrap or wraparound) in Microsoft Standard XPS allows an unauthorized at | |
CVE-2026-69818 |
high | 7.0 | 0.0026 | 2026-10-30 | Use after free in Windows Win32K allows an authorized attacker to elevate privileges local | |
CVE-2026-69820 |
high | 8.2 | 0.0035 | 2026-10-30 | Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privi | |
CVE-2026-69816 |
high | 7.0 | 0.0026 | 2026-10-30 | Use after free in Windows Accounts Control allows an authorized attacker to elevate privil | |
CVE-2026-69817 |
high | 7.0 | 0.0026 | 2026-10-30 | Use after free in Windows Bluetooth Port Driver allows an authorized attacker to elevate p | |
CVE-2026-69813 |
high | 8.1 | 0.0071 | 2026-10-30 | Use after free in Windows DNS allows an unauthorized attacker to execute code over a netwo | |
CVE-2026-69814 |
high | 7.0 | 0.0026 | 2026-10-30 | Use after free in Windows Credential Providers allows an authorized attacker to elevate pr | |
CVE-2026-69809 |
high | 7.5 | 0.0117 | 2026-10-30 | Missing release of memory after effective lifetime in Active Directory Domain Services all | |
CVE-2026-69806 |
high | 7.0 | 0.0082 | 2026-10-30 | Exposure of sensitive information to an unauthorized actor in .NET allows an authorized at | |
CVE-2026-69807 |
high | 8.0 | 0.0087 | 2026-10-30 | Improper limitation of a pathname to a restricted directory ('path traversal') in Windows | |
CVE-2026-69803 |
medium | 5.9 | 0.0083 | 2026-10-30 | Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to disclose info | |
CVE-2026-69805 |
high | 7.5 | 0.0050 | 2026-10-30 | External control of file name or path in .NET allows an unauthorized attacker to elevate p | |
CVE-2026-69799 |
high | 7.8 | 0.0020 | 2026-10-30 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-69801 |
high | 7.8 | 0.0033 | 2026-10-30 | Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to eleva | |
CVE-2026-69793 |
high | 7.5 | 0.0083 | 2026-10-30 | Improper validation of consistency within input in Windows TCP/IP allows an unauthorized a | |
CVE-2026-69794 |
medium | 5.5 | 0.0040 | 2026-10-30 | Buffer over-read in Windows Encrypting File System (EFS) allows an authorized attacker to | |
CVE-2026-69792 |
medium | 4.7 | 0.0021 | 2026-10-30 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-69786 |
high | 8.1 | 0.0071 | 2026-10-30 | Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to exec | |
CVE-2026-69791 |
high | 7.0 | 0.0026 | 2026-10-30 | Use after free in Windows Device Association Service allows an authorized attacker to elev | |
CVE-2026-69784 |
high | 8.8 | 0.0033 | 2026-10-30 | Use after free in Windows Hello allows an authorized attacker to elevate privileges locall | |
CVE-2026-69785 |
high | 7.8 | 0.0046 | 2026-10-30 | Untrusted search path in Windows Smart Card allows an authorized attacker to elevate privi | |
CVE-2026-69777 |
high | 8.0 | 0.0058 | 2026-10-30 | Heap-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate | |
CVE-2026-69779 |
high | 7.0 | 0.0020 | 2026-10-30 | Time-of-check time-of-use (toctou) race condition in Windows Win32K allows an authorized a | |
CVE-2026-69769 |
critical | 9.8 | 0.0097 | 2026-10-30 | Heap-based buffer overflow in Windows HTTP Print Provider allows an unauthorized attacker | |
CVE-2026-69773 |
high | 8.0 | 0.0077 | 2026-10-30 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to e | |
CVE-2026-69761 |
high | 7.1 | 0.0057 | 2026-10-30 | Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges over | |
CVE-2026-69768 |
critical | 9.8 | 0.0097 | 2026-10-30 | Heap-based buffer overflow in Windows RNDIS allows an unauthorized attacker to execute cod |