Browse All CVEs
33,159 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-69784 |
high | 8.8 | 0.0033 | 2026-10-30 | Use after free in Windows Hello allows an authorized attacker to elevate privileges locall | |
CVE-2026-69785 |
high | 7.8 | 0.0046 | 2026-10-30 | Untrusted search path in Windows Smart Card allows an authorized attacker to elevate privi | |
CVE-2026-69777 |
high | 8.0 | 0.0058 | 2026-10-30 | Heap-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate | |
CVE-2026-69779 |
high | 7.0 | 0.0020 | 2026-10-30 | Time-of-check time-of-use (toctou) race condition in Windows Win32K allows an authorized a | |
CVE-2026-69769 |
critical | 9.8 | 0.0097 | 2026-10-30 | Heap-based buffer overflow in Windows HTTP Print Provider allows an unauthorized attacker | |
CVE-2026-69773 |
high | 8.0 | 0.0077 | 2026-10-30 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to e | |
CVE-2026-69761 |
high | 7.1 | 0.0057 | 2026-10-30 | Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges over | |
CVE-2026-69768 |
critical | 9.8 | 0.0097 | 2026-10-30 | Heap-based buffer overflow in Windows RNDIS allows an unauthorized attacker to execute cod | |
CVE-2026-69760 |
high | 7.5 | 0.0117 | 2026-10-30 | Out-of-bounds read in Windows Kerberos allows an unauthorized attacker to deny service ove | |
CVE-2026-69731 |
high | 7.8 | 0.0033 | 2026-10-30 | Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate pr | |
CVE-2026-69738 |
high | 7.8 | 0.0033 | 2026-10-30 | Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker | |
CVE-2026-69725 |
high | 7.8 | 0.0033 | 2026-10-30 | Double free in Windows Hello allows an authorized attacker to elevate privileges locally. | |
CVE-2026-69727 |
high | 8.0 | 0.0077 | 2026-10-30 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to e | |
CVE-2026-69715 |
critical | 9.8 | 0.0097 | 2026-10-30 | Out-of-bounds read in Windows Direct Show allows an unauthorized attacker to execute code | |
CVE-2026-69720 |
high | 7.8 | 0.0033 | 2026-10-30 | Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to | |
CVE-2026-69713 |
medium | 4.4 | 0.0035 | 2026-10-30 | Dependency on vulnerable third-party component in Windows Secure Boot allows an authorized | |
CVE-2026-69714 |
high | 8.0 | 0.0077 | 2026-10-30 | Stack-based buffer overflow in Windows Device Association Service allows an authorized att | |
CVE-2026-69710 |
high | 7.5 | 0.0021 | 2026-10-30 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-69708 |
high | 7.0 | 0.0026 | 2026-10-30 | Use after free in Windows Web Platform Storage allows an authorized attacker to elevate pr | |
CVE-2026-69709 |
high | 7.8 | 0.0033 | 2026-10-30 | Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code l | |
CVE-2026-69706 |
high | 7.1 | 0.0057 | 2026-10-30 | Use after free in Windows Win32K allows an authorized attacker to elevate privileges over | |
CVE-2026-69707 |
high | 7.8 | 0.0033 | 2026-10-30 | Integer overflow or wraparound in Windows USB Audio Class driver (usbaudio.sys) allows an | |
CVE-2026-69688 |
high | 7.1 | 0.0057 | 2026-10-30 | Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized at | |
CVE-2026-69692 |
high | 7.0 | 0.0026 | 2026-10-30 | Use after free in Windows Audio Service allows an authorized attacker to elevate privilege | |
CVE-2026-69685 |
high | 7.8 | 0.0033 | 2026-10-30 | Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate pr | |
CVE-2026-69687 |
high | 7.8 | 0.0033 | 2026-10-30 | Integer underflow (wrap or wraparound) in Windows USB Audio Class driver (usbaudio.sys) al | |
CVE-2026-69680 |
high | 8.1 | 0.0034 | 2026-10-30 | Origin validation error in Windows DNS allows an unauthorized attacker to perform spoofing | |
CVE-2026-69682 |
high | 7.0 | 0.0020 | 2026-10-30 | Use after free in Windows Host Guardian Service allows an authorized attacker to elevate p | |
CVE-2026-69679 |
medium | 5.7 | 0.0065 | 2026-10-30 | Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service ov | |
CVE-2026-69672 |
medium | 5.5 | 0.0040 | 2026-10-30 | Use of uninitialized resource in Windows DNS allows an authorized attacker to disclose inf | |
CVE-2026-69674 |
medium | 5.5 | 0.0030 | 2026-10-30 | Missing authentication for critical function in Windows Modern Device Management (MDM) all | |
CVE-2026-69654 |
high | 7.0 | 0.0026 | 2026-10-30 | Use after free in Windows Accounts Control allows an authorized attacker to elevate privil | |
CVE-2026-69669 |
high | 8.8 | 0.0082 | 2026-10-30 | Heap-based buffer overflow in Windows Kernel allows an unauthorized attacker to execute co | |
CVE-2026-69643 |
high | 8.0 | 0.0077 | 2026-10-30 | Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to eleva | |
CVE-2026-69652 |
high | 7.0 | 0.0026 | 2026-10-30 | Use after free in Windows Win32K allows an authorized attacker to elevate privileges local | |
CVE-2026-69636 |
medium | 6.5 | 0.0100 | 2026-10-30 | Improper neutralization of special elements used in an sql command ('sql injection') in Mi | |
CVE-2026-69637 |
medium | 5.7 | 0.0065 | 2026-10-30 | Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service ov | |
CVE-2026-69632 |
high | 8.8 | 0.0082 | 2026-10-30 | Use after free in Microsoft Office allows an unauthorized attacker to execute code over a | |
CVE-2026-69629 |
high | 8.8 | 0.0082 | 2026-10-30 | Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to | |
CVE-2026-69630 |
high | 7.0 | 0.0026 | 2026-10-30 | Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges l | |
CVE-2026-69625 |
high | 8.0 | 0.0077 | 2026-10-30 | Heap-based buffer overflow in Windows Connected User Experiences and Telemetry allows an a | |
CVE-2026-69626 |
medium | 6.5 | 0.0092 | 2026-10-30 | Buffer over-read in Microsoft Office allows an unauthorized attacker to disclose informati | |
CVE-2026-69620 |
high | 8.1 | 0.0071 | 2026-10-30 | Stack-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to exec | |
CVE-2026-69624 |
medium | 6.5 | 0.0074 | 2026-10-30 | Incomplete list of disallowed inputs in Active Directory Certificate Services (AD CS) allo | |
CVE-2026-69618 |
medium | 5.5 | 0.0040 | 2026-10-30 | Out-of-bounds read in Windows SMB Client allows an authorized attacker to disclose informa | |
CVE-2026-69619 |
high | 8.0 | 0.0077 | 2026-10-30 | Out-of-bounds read in Windows exFAT File System allows an authorized attacker to elevate p | |
CVE-2026-69616 |
medium | 5.5 | 0.0040 | 2026-10-30 | Out-of-bounds read in Windows Remote Desktop Services allows an authorized attacker to dis | |
CVE-2026-69617 |
high | 7.0 | 0.0026 | 2026-10-30 | Out-of-bounds read in Windows Resilient File System (ReFS) allows an authorized attacker t | |
CVE-2026-69615 |
low | 3.5 | 0.0040 | 2026-10-30 | Improper neutralization of input during web page generation ('cross-site scripting') in Mi | |
CVE-2026-69613 |
high | 7.0 | 0.0026 | 2026-10-30 | Use after free in Windows Image Acquisition allows an authorized attacker to elevate privi |