Browse All CVEs
33,178 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-69324 |
high | 7.8 | 0.0033 | 2026-10-30 | Access of resource using incompatible type ('type confusion') in Windows Performance Monit | |
CVE-2026-69319 |
high | 7.0 | 0.0020 | 2026-10-30 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-69322 |
high | 8.0 | 0.0077 | 2026-10-30 | Double free in Microsoft Windows Search Component allows an authorized attacker to elevate | |
CVE-2026-69317 |
medium | 5.7 | 0.0089 | 2026-10-30 | Out-of-bounds read in Remote Desktop Client allows an authorized attacker to disclose info | |
CVE-2026-69318 |
medium | 5.5 | 0.0040 | 2026-10-30 | Out-of-bounds read in Windows Imaging Component allows an authorized attacker to disclose | |
CVE-2026-69316 |
medium | 4.7 | 0.0031 | 2026-10-30 | Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose infor | |
CVE-2026-69311 |
high | 7.0 | 0.0026 | 2026-10-30 | Use after free in Windows Audio Service allows an authorized attacker to elevate privilege | |
CVE-2026-69312 |
high | 7.8 | 0.0033 | 2026-10-30 | Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges loc | |
CVE-2026-69308 |
medium | 5.5 | 0.0040 | 2026-10-30 | Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose inf | |
CVE-2026-69309 |
high | 7.0 | 0.0026 | 2026-10-30 | Double free in Windows Print Spooler Components allows an authorized attacker to elevate p | |
CVE-2026-69298 |
high | 7.8 | 0.0033 | 2026-10-30 | Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker | |
CVE-2026-69304 |
medium | 5.9 | 0.0086 | 2026-10-30 | Improper handling of highly compressed data (data amplification) in ASP.NET Core allows an | |
CVE-2026-69291 |
high | 8.8 | 0.0082 | 2026-10-30 | Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthoriz | |
CVE-2026-69287 |
high | 7.0 | 0.0026 | 2026-10-30 | Use after free in Windows Remote Desktop Services allows an authorized attacker to elevate | |
CVE-2026-69290 |
high | 7.8 | 0.0033 | 2026-10-30 | Stack-based buffer overflow in Windows Storage Spaces Controller allows an authorized atta | |
CVE-2026-67645 |
medium | 6.5 | 0.0100 | 2026-10-30 | Out-of-bounds read in SQL Server allows an authorized attacker to disclose information ove | |
CVE-2026-68896 |
high | 7.8 | 0.0037 | 2026-10-30 | Absolute path traversal in Microsoft Windows Search Component allows an authorized attacke | |
CVE-2026-67369 |
medium | 6.5 | 0.0100 | 2026-10-30 | Out-of-bounds read in SQL Server allows an authorized attacker to disclose information ove | |
CVE-2026-67624 |
medium | 6.5 | 0.0100 | 2026-10-30 | Out-of-bounds read in SQL Server allows an authorized attacker to disclose information ove | |
CVE-2026-66307 |
high | 7.5 | 0.0117 | 2026-10-30 | Integer underflow (wrap or wraparound) in Skype for Business allows an unauthorized attack | |
CVE-2026-66819 |
high | 8.8 | 0.0099 | 2026-10-30 | Improper neutralization of special elements used in an sql command ('sql injection') in SQ | |
CVE-2026-65812 |
medium | 6.8 | 0.0089 | 2026-10-30 | Insertion of sensitive information into sent data in Microsoft Teams for Android allows an | |
CVE-2026-66303 |
medium | 6.5 | 0.0114 | 2026-10-30 | Null pointer dereference in Skype for Business allows an authorized attacker to deny servi | |
CVE-2026-65772 |
high | 8.8 | 0.0169 | 2026-10-30 | Deserialization of untrusted data in Microsoft Dynamics 365 allows an authorized attacker | |
CVE-2026-62906 |
high | 7.4 | 0.0092 | 2026-10-30 | Improper neutralization of special elements in data query logic in Microsoft Discovery Stu | |
CVE-2026-64918 |
medium | 6.5 | 0.0087 | 2026-10-30 | Insufficiently protected credentials in Microsoft Office allows an unauthorized attacker t | |
CVE-2026-62804 |
high | 7.8 | 0.0061 | 2026-10-30 | External control of file name or path in Microsoft Office Word allows an unauthorized atta | |
CVE-2026-62874 |
critical | 10.0 | 0.0032 | 2026-10-30 | Insufficient verification of data authenticity in Azure Billing allows an unauthorized att | |
CVE-2026-58599 |
high | 7.8 | 0.0047 | 2026-10-30 | Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized atta | |
CVE-2026-58649 |
medium | 6.5 | 0.0036 | 2026-10-30 | Origin validation error in .NET allows an unauthorized attacker to disclose information ov | |
CVE-2026-47297 |
high | 8.1 | 0.0111 | 2026-10-30 | Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute | |
CVE-2026-57099 |
high | 7.5 | 0.0117 | 2026-10-30 | Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorize | |
CVE-2026-55613 |
medium | 6.9 | — | 2026-10-30 | uhttpd is a small HTTP server. In unpatched repository snapshots, `uh_ubus_data_send()` in | |
CVE-2026-16760 |
high | 8.8 | — | 2026-10-30 | In Trail of Bits fickling through 0.1.12, the _process_import() method in fickle.py adds a | |
CVE-2026-111578 |
high | 7.5 | — | 2026-10-30 | The PDF Invoices & Packing Slips for WooCommerce WordPress plugin from 5.16.2 before 5.16. | |
CVE-2026-118938 |
high | 8.8 | — | 2026-10-30 | In Trail of Bits fickling through 0.1.12, a pickle STACK_GLOBAL operand carrying a dotted | |
CVE-2026-107161 |
high | 7.5 | 0.0034 | 2026-10-30 | A heap-based buffer overflow flaw was found in Cyrus SASL. The add_to_challenge() function | |
CVE-2026-59993 |
medium | 6.5 | — | 2026-10-30 | Picotls is a TLS protocol library that allows users select different crypto backends based | |
CVE-2026-62297 |
high | 7.5 | — | 2026-10-30 | ag-psd is a JavaScript library for reading and writing Photoshop Document files. Before th | |
CVE-2026-62967 |
high | 8.1 | — | 2026-10-30 | ZTNET is a ZeroTier web UI for private controllers with multiuser and organization support | |
CVE-2026-62979 |
high | 8.4 | — | 2026-10-30 | jack lets users share media libraries through their Radarr/Sonarr stack, peer-to-peer. Pri | |
CVE-2026-62989 |
high | 8.1 | — | 2026-10-30 | Shopper is a Headless e-commerce Admin Panel. Prior to 2.10.0, the Variants Livewire compo | |
CVE-2026-62990 |
high | 8.7 | — | 2026-10-30 | Shopper is a Headless e-commerce Admin Panel. In versions from 2.0.0 prior to 2.10.1 and i | |
CVE-2026-62991 |
medium | 6.5 | — | 2026-10-30 | Shopper is a Headless e-commerce Admin Panel. Prior to 2.10.1, the customer detail route ` | |
CVE-2026-62853 |
critical | 9.9 | — | 2026-10-30 | ThingLinks is an enterprise IoT platform. Prior to 1.4.0, the `/groovyScriptTest/registerS | |
CVE-2026-119342 |
medium | 5.3 | — | 2026-10-30 | Stirling-PDF is a locally hosted web application that facilitates various operations on PD | |
CVE-2026-62849 |
critical | 9.1 | — | 2026-10-30 | ThingLinks is an enterprise IoT platform. Prior to 1.4.0, an unauthenticated SQL injection | |
CVE-2026-117645 |
medium | 5.3 | — | 2026-10-30 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-119341 |
none | — | — | 2026-10-30 | Tesseract is an open source OCR engine. Prior to 5.5.4, ReadAdaptedClass in src/classify/a | |
CVE-2026-62864 |
high | 7.5 | — | 2026-10-30 | Ring is a Clojure web applications library inspired by Python's WSGI and Ruby's Rack. Prio |