Browse All CVEs
13,236 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-49173 |
high | 7.8 | 0.0033 | 2026-10-29 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges local | |
CVE-2026-50338 |
high | 8.2 | 0.0052 | 2026-10-29 | 1 PoC | Improper authentication in Azure Spring Apps allows an authorized attacker to elevate priv |
CVE-2026-50520 |
high | 8.4 | 0.0035 | 2026-10-29 | Improper neutralization of special elements used in a command ('command injection') in Vis | |
CVE-2026-50663 |
high | 8.8 | 0.0094 | 2026-10-29 | Relative path traversal in Age of Empires II: Definitive Edition Game allows an unauthoriz | |
CVE-2026-54058 |
high | 8.3 | 0.0052 | 2026-10-29 | Pillow is a Python imaging library. Prior to 12.3.0, when Pillow loads an uncompressed McI | |
CVE-2026-55011 |
high | 7.8 | 0.0047 | 2026-10-29 | Integer underflow (wrap or wraparound) in Microsoft Defender allows an unauthorized attack | |
CVE-2026-55012 |
high | 7.8 | 0.0047 | 2026-10-29 | Integer overflow or wraparound in Microsoft Defender allows an unauthorized attacker to ex | |
CVE-2026-55014 |
high | 7.8 | 0.0030 | 2026-10-29 | Improper access control in Windows Remote Help Defense allows an authorized attacker to el | |
CVE-2026-56169 |
high | 8.1 | 0.0075 | 2026-10-29 | Improper authentication in Windows Admin Center allows an authorized attacker to elevate p | |
CVE-2026-56170 |
high | 7.5 | 0.0117 | 2026-10-29 | Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorize | |
CVE-2026-57107 |
high | 7.8 | 0.0030 | 2026-10-29 | Improper authentication in Windows Admin Center allows an authorized attacker to elevate p | |
CVE-2026-57969 |
high | 8.8 | 0.0078 | 2026-10-29 | Missing authentication for critical function in Azure CycleCloud allows an authorized atta | |
CVE-2026-58595 |
high | 8.1 | 0.0069 | 2026-10-29 | Improper restriction of rendered ui layers or frames in Microsoft Bing App for IOS allows | |
CVE-2026-58631 |
high | 7.8 | 0.0030 | 2026-10-29 | Improper authorization in Windows Admin Center allows an authorized attacker to execute co | |
CVE-2026-58636 |
high | 7.8 | 0.0037 | 2026-10-29 | Improper link resolution before file access ('link following') in Window PC Manager allows | |
CVE-2026-58647 |
high | 8.0 | 0.0052 | 2026-10-29 | Improper neutralization of input during web page generation ('cross-site scripting') in Po | |
CVE-2026-59197 |
high | 8.2 | 0.0044 | 2026-10-29 | Pillow is a Python imaging library. Prior to 12.3.0, Pillow's public rank-filter API can t | |
CVE-2026-59200 |
high | 7.5 | 0.0039 | 2026-10-29 | Pillow is a Python imaging library. From 5.1.0 until 12.3.0, PdfParser.PdfStream.decode() | |
CVE-2026-47967 |
high | 7.8 | 0.0026 | 2026-10-29 | Audition is affected by an out-of-bounds write vulnerability that could result in arbitrar | |
CVE-2026-47968 |
high | 7.8 | 0.0026 | 2026-10-29 | Audition is affected by an out-of-bounds write vulnerability that could result in arbitrar | |
CVE-2026-48309 |
high | 7.8 | 0.0026 | 2026-10-29 | Audition is affected by an out-of-bounds write vulnerability that could result in arbitrar | |
CVE-2026-48365 |
high | 7.8 | 0.0026 | 2026-10-29 | Audition is affected by an out-of-bounds write vulnerability that could result in arbitrar | |
CVE-2026-48368 |
high | 7.8 | 0.0026 | 2026-10-29 | Audition is affected by an out-of-bounds write vulnerability that could result in arbitrar | |
CVE-2026-50428 |
high | 7.1 | 0.0041 | 2026-10-29 | Out-of-bounds read in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an | |
CVE-2026-50438 |
high | 8.8 | 0.0037 | 2026-10-29 | Improper link resolution before file access ('link following') in Microsoft PC Manager all | |
CVE-2026-50510 |
high | 7.8 | 0.0036 | 2026-10-29 | Improper restriction of names for files and other resources in Github Copilot allows an un | |
CVE-2026-50658 |
high | 7.0 | 0.0020 | 2026-10-29 | Time-of-check time-of-use (toctou) race condition in Microsoft Defender allows an authoriz | |
CVE-2026-56196 |
high | 8.8 | 0.0102 | 2026-10-29 | Relative path traversal in Windows Admin Center allows an authorized attacker to execute c | |
CVE-2026-56197 |
high | 8.8 | 0.0099 | 2026-10-29 | Improper neutralization of special elements used in a command ('command injection') in Win | |
CVE-2026-56642 |
high | 8.8 | 0.0091 | 2026-10-29 | Stack-based buffer overflow in Microsoft Fabric Data Warehouse allows an authorized attack | |
CVE-2026-57101 |
high | 7.1 | 0.0048 | 2026-10-29 | Improper neutralization of input during web page generation ('cross-site scripting') in Vi | |
CVE-2026-57102 |
high | 8.8 | 0.0082 | 2026-10-29 | Inclusion of functionality from untrusted control sphere in Visual Studio Code allows an u | |
CVE-2026-57108 |
high | 7.5 | 0.0117 | 2026-10-29 | Access of resource using incompatible type ('type confusion') in .NET Core allows an unaut | |
CVE-2026-57968 |
high | 7.8 | 0.0033 | 2026-10-29 | Buffer over-read in Windows Subsystem for Linux allows an authorized attacker to elevate p | |
CVE-2026-58529 |
high | 7.1 | 0.0104 | 2026-10-29 | Out-of-bounds read in Active Directory Federation Services (AD FS) allows an authorized at | |
CVE-2026-58617 |
high | 8.1 | 0.0079 | 2026-10-29 | Improper access control in Microsoft 365 Copilot for iOS allows an unauthorized attacker t | |
CVE-2026-58633 |
high | 7.8 | 0.0033 | 2026-10-29 | Use after free in Desktop Window Manager allows an authorized attacker to elevate privileg | |
CVE-2026-58634 |
high | 7.8 | 0.0033 | 2026-10-29 | Use after free in Desktop Window Manager allows an authorized attacker to elevate privileg | |
CVE-2026-15637 |
high | 7.5 | 0.0025 | 2026-10-29 | Improper authorization in the PAM SSH key and certificate retrieval endpoints in Devoluti | |
CVE-2026-15641 |
high | 7.1 | 0.0029 | 2026-10-29 | Improper authorization in the access request status endpoint in Devolutions Server 2026.2. | |
CVE-2026-47300 |
high | 8.8 | 0.0078 | 2026-10-29 | Incorrect implementation of authentication algorithm in ASP.NET Core allows an authorized | |
CVE-2026-47302 |
high | 7.5 | 0.0117 | 2026-10-29 | Allocation of resources without limits or throttling in .NET allows an unauthorized attack | |
CVE-2026-47303 |
high | 8.8 | 0.0084 | 2026-10-29 | Authentication bypass by assumed-immutable data in ASP.NET Core allows an authorized attac | |
CVE-2026-47304 |
high | 8.1 | 0.0029 | 2026-10-29 | Improper verification of cryptographic signature in .NET allows an unauthorized attacker t | |
CVE-2026-5040 |
high | 7.1 | 0.0013 | 2026-10-29 | TP-Link Deco M5 v1 uses a weak password hashing mechanism to store user credentials. An a | |
CVE-2026-15410 |
high | 7.2 | 0.1179 | 2026-10-29 | KEV | SonicWall SMA1000 Appliances contain a code injection vulnerability which in specific cond |
CVE-2026-47423 |
high | 8.2 | 0.0041 | 2026-10-29 | DOMPurify is a DOM-only cross-site scripting sanitizer for HTML, MathML, and SVG. In 3.4.4 | |
CVE-2026-47476 |
high | 7.5 | 0.0054 | 2026-10-29 | NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can ca | |
CVE-2026-47477 |
high | 7.5 | 0.0053 | 2026-10-29 | NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can ca | |
CVE-2026-47478 |
high | 7.5 | 0.0053 | 2026-10-29 | NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can ca |