Browse All CVEs
12,376 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-96302 |
high | 7.0 | 0.0025 | 2026-10-29 | Use after free in Windows Installer allows an authorized attacker to elevate privileges lo | |
CVE-2026-96246 |
high | 7.5 | 0.0098 | 2026-10-29 | Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to discl | |
CVE-2026-96245 |
high | 7.5 | 0.0098 | 2026-10-29 | Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthori | |
CVE-2026-96236 |
high | 7.5 | 0.0109 | 2026-10-29 | Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorize | |
CVE-2026-96244 |
high | 7.8 | 0.0031 | 2026-10-29 | Use after free in Windows Internal System User Profile allows an authorized attacker to el | |
CVE-2026-96223 |
high | 7.8 | 0.0031 | 2026-10-29 | Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges loca | |
CVE-2026-96220 |
high | 7.8 | 0.0030 | 2026-10-29 | Improper control of generation of code ('code injection') in Windows Assigned Access allow | |
CVE-2026-96217 |
high | 7.8 | 0.0031 | 2026-10-29 | Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privil | |
CVE-2026-96215 |
high | 7.0 | 0.0019 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-96216 |
high | 7.0 | 0.0025 | 2026-10-29 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges local | |
CVE-2026-96108 |
high | 7.8 | 0.0030 | 2026-10-29 | Use after free in Desktop Window Manager allows an authorized attacker to elevate privileg | |
CVE-2026-88204 |
high | 7.3 | 0.0063 | 2026-10-29 | Improper neutralization of input during web page generation ('cross-site scripting') in Mi | |
CVE-2026-88202 |
high | 8.8 | 0.0076 | 2026-10-29 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to exe | |
CVE-2026-88197 |
high | 8.8 | 0.0052 | 2026-10-29 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute | |
CVE-2026-88198 |
high | 8.8 | 0.0071 | 2026-10-29 | Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elev | |
CVE-2026-88194 |
high | 7.8 | 0.0031 | 2026-10-29 | Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate pr | |
CVE-2026-88196 |
high | 8.8 | 0.0074 | 2026-10-29 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute | |
CVE-2026-88193 |
high | 7.8 | 0.0030 | 2026-10-29 | Heap-based buffer overflow in Microsoft Scripting Engine allows an authorized attacker to | |
CVE-2026-88189 |
high | 7.8 | 0.0024 | 2026-10-29 | Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate pr | |
CVE-2026-88191 |
high | 7.8 | 0.0037 | 2026-10-29 | Improper link resolution before file access ('link following') in Microsoft Windows Search | |
CVE-2026-88182 |
high | 7.8 | 0.0031 | 2026-10-29 | Use after free in Microsoft Windows Search Component allows an authorized attacker to elev | |
CVE-2026-88188 |
high | 7.8 | 0.0031 | 2026-10-29 | Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate pr | |
CVE-2026-88180 |
high | 7.8 | 0.0024 | 2026-10-29 | Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate pr | |
CVE-2026-88181 |
high | 7.8 | 0.0031 | 2026-10-29 | Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate pr | |
CVE-2026-88179 |
high | 7.8 | 0.0031 | 2026-10-29 | Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate pr | |
CVE-2026-88177 |
high | 7.8 | 0.0024 | 2026-10-29 | Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate pr | |
CVE-2026-88174 |
high | 8.1 | 0.0042 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-88171 |
high | 8.1 | 0.0069 | 2026-10-29 | Double free in Windows DHCP Server allows an unauthorized attacker to execute code over a | |
CVE-2026-88173 |
high | 8.1 | 0.0051 | 2026-10-29 | Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unautho | |
CVE-2026-88168 |
high | 7.8 | 0.0031 | 2026-10-29 | Heap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to | |
CVE-2026-88165 |
high | 8.8 | 0.0085 | 2026-10-29 | Out-of-bounds write in Active Directory Domain Services allows an authorized attacker to e | |
CVE-2026-88161 |
high | 7.0 | 0.0025 | 2026-10-29 | Use after free in Windows Local Security Authority (LSA) allows an authorized attacker to | |
CVE-2026-88160 |
high | 7.0 | 0.0015 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-88155 |
high | 8.8 | 0.0082 | 2026-10-29 | Heap-based buffer overflow in Microsoft Office SharePoint allows an authorized attacker to | |
CVE-2026-88150 |
high | 8.8 | 0.0076 | 2026-10-29 | Use of uninitialized resource in Microsoft Office Word allows an unauthorized attacker to | |
CVE-2026-88145 |
high | 8.8 | 0.0074 | 2026-10-29 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to ex | |
CVE-2026-88136 |
high | 8.8 | 0.0095 | 2026-10-29 | Improper resolution of path equivalence in WebDAV allows an authorized attacker to execute | |
CVE-2026-88135 |
high | 7.8 | 0.0032 | 2026-10-29 | Improper access control in WebDAV allows an authorized attacker to elevate privileges loca | |
CVE-2026-88126 |
high | 7.8 | 0.0036 | 2026-10-29 | Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privilege | |
CVE-2026-88109 |
high | 7.8 | 0.0034 | 2026-10-29 | Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate p | |
CVE-2026-88105 |
high | 7.8 | 0.0030 | 2026-10-29 | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elev | |
CVE-2026-88103 |
high | 7.0 | 0.0025 | 2026-10-29 | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elev | |
CVE-2026-88100 |
high | 7.8 | 0.0031 | 2026-10-29 | Use after free in Windows Storage Spaces Controller allows an authorized attacker to eleva | |
CVE-2026-88101 |
high | 7.8 | 0.0021 | 2026-10-29 | Weak authentication in Microsoft Input Method Editor (IME) allows an authorized attacker t | |
CVE-2026-88096 |
high | 7.0 | 0.0015 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-88098 |
high | 7.0 | 0.0020 | 2026-10-29 | Untrusted pointer dereference in Windows Security Support Provider Interface allows an aut | |
CVE-2026-88080 |
high | 7.8 | 0.0024 | 2026-10-29 | Use after free in Windows Installer allows an authorized attacker to elevate privileges lo | |
CVE-2026-88091 |
high | 7.8 | 0.0293 | 2026-10-29 | Deserialization of untrusted data in Windows Management Instrumentation allows an authoriz | |
CVE-2026-88076 |
high | 7.0 | 0.0028 | 2026-10-29 | Null pointer dereference in Windows Installer allows an authorized attacker to elevate pri | |
CVE-2026-88079 |
high | 7.0 | 0.0028 | 2026-10-29 | Null pointer dereference in Windows MIDI Service Module allows an authorized attacker to e |