All Critical High Medium Low
CVE Severity CVSS EPSS First Seen Flags Description
CVE-2026-26169 medium 6.1 0.0231 2026-10-29 Buffer over-read in Windows Kernel Memory allows an authorized attacker to disclose inform
CVE-2026-26175 medium 4.6 0.0040 2026-10-29 Use of uninitialized resource in Windows Boot Manager allows an unauthorized attacker to b
CVE-2026-27258 medium 5.4 0.0018 2026-10-29 Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability
CVE-2026-27288 medium 5.4 0.0019 2026-10-29 Adobe Experience Manager versions 6.5.24, FP11.7 and earlier are affected by a DOM-based C
CVE-2026-27906 medium 4.4 0.0039 2026-10-29 Improper input validation in Windows Hello allows an authorized attacker to bypass a secur
CVE-2026-27925 medium 6.5 0.0036 2026-10-29 Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an unauthorize
CVE-2026-27930 medium 5.5 0.0038 2026-10-29 Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information
CVE-2026-27931 medium 5.5 0.0049 2026-10-29 Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information
CVE-2026-32072 medium 6.2 0.0029 2026-10-29 Improper authentication in Windows Active Directory allows an unauthorized attacker to per
CVE-2026-32079 medium 5.5 0.0034 2026-10-29 Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows
CVE-2026-32081 medium 5.5 0.0042 2026-10-29 Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows
CVE-2026-32084 medium 5.5 0.0035 2026-10-29 Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows
CVE-2026-32085 medium 5.5 0.0044 2026-10-29 Exposure of sensitive information to an unauthorized actor in Windows Remote Procedure Cal
CVE-2026-32088 medium 5.7 0.0019 2026-10-29 Concurrent execution using shared resource with improper synchronization ('race condition'
CVE-2026-32151 medium 6.5 0.0075 2026-10-29 Exposure of sensitive information to an unauthorized actor in Windows Shell allows an auth