Browse All CVEs
12,407 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-88188 |
high | 7.8 | 0.0031 | 2026-10-29 | Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate pr | |
CVE-2026-88180 |
high | 7.8 | 0.0024 | 2026-10-29 | Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate pr | |
CVE-2026-88181 |
high | 7.8 | 0.0031 | 2026-10-29 | Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate pr | |
CVE-2026-88179 |
high | 7.8 | 0.0031 | 2026-10-29 | Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate pr | |
CVE-2026-88177 |
high | 7.8 | 0.0024 | 2026-10-29 | Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate pr | |
CVE-2026-88174 |
high | 8.1 | 0.0042 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-88171 |
high | 8.1 | 0.0069 | 2026-10-29 | Double free in Windows DHCP Server allows an unauthorized attacker to execute code over a | |
CVE-2026-88173 |
high | 8.1 | 0.0051 | 2026-10-29 | Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unautho | |
CVE-2026-88168 |
high | 7.8 | 0.0031 | 2026-10-29 | Heap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to | |
CVE-2026-88165 |
high | 8.8 | 0.0085 | 2026-10-29 | Out-of-bounds write in Active Directory Domain Services allows an authorized attacker to e | |
CVE-2026-88161 |
high | 7.0 | 0.0025 | 2026-10-29 | Use after free in Windows Local Security Authority (LSA) allows an authorized attacker to | |
CVE-2026-88160 |
high | 7.0 | 0.0015 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-88155 |
high | 8.8 | 0.0082 | 2026-10-29 | Heap-based buffer overflow in Microsoft Office SharePoint allows an authorized attacker to | |
CVE-2026-88150 |
high | 8.8 | 0.0076 | 2026-10-29 | Use of uninitialized resource in Microsoft Office Word allows an unauthorized attacker to | |
CVE-2026-88145 |
high | 8.8 | 0.0074 | 2026-10-29 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to ex | |
CVE-2026-88136 |
high | 8.8 | 0.0095 | 2026-10-29 | Improper resolution of path equivalence in WebDAV allows an authorized attacker to execute | |
CVE-2026-88135 |
high | 7.8 | 0.0032 | 2026-10-29 | Improper access control in WebDAV allows an authorized attacker to elevate privileges loca | |
CVE-2026-88126 |
high | 7.8 | 0.0036 | 2026-10-29 | Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privilege | |
CVE-2026-88109 |
high | 7.8 | 0.0034 | 2026-10-29 | Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate p | |
CVE-2026-88105 |
high | 7.8 | 0.0030 | 2026-10-29 | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elev | |
CVE-2026-88103 |
high | 7.0 | 0.0025 | 2026-10-29 | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elev | |
CVE-2026-88100 |
high | 7.8 | 0.0031 | 2026-10-29 | Use after free in Windows Storage Spaces Controller allows an authorized attacker to eleva | |
CVE-2026-88101 |
high | 7.8 | 0.0021 | 2026-10-29 | Weak authentication in Microsoft Input Method Editor (IME) allows an authorized attacker t | |
CVE-2026-88096 |
high | 7.0 | 0.0015 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-88098 |
high | 7.0 | 0.0020 | 2026-10-29 | Untrusted pointer dereference in Windows Security Support Provider Interface allows an aut | |
CVE-2026-88080 |
high | 7.8 | 0.0024 | 2026-10-29 | Use after free in Windows Installer allows an authorized attacker to elevate privileges lo | |
CVE-2026-88091 |
high | 7.8 | 0.0293 | 2026-10-29 | Deserialization of untrusted data in Windows Management Instrumentation allows an authoriz | |
CVE-2026-88076 |
high | 7.0 | 0.0028 | 2026-10-29 | Null pointer dereference in Windows Installer allows an authorized attacker to elevate pri | |
CVE-2026-88079 |
high | 7.0 | 0.0028 | 2026-10-29 | Null pointer dereference in Windows MIDI Service Module allows an authorized attacker to e | |
CVE-2026-88074 |
high | 7.8 | 0.0032 | 2026-10-29 | Integer overflow or wraparound in Windows Virtualization-Based Security (VBS) Enclave allo | |
CVE-2026-88072 |
high | 7.8 | 0.0039 | 2026-10-29 | Improper access control in Windows Host Guardian Service allows an authorized attacker to | |
CVE-2026-88073 |
high | 8.8 | 0.0027 | 2026-10-29 | Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privile | |
CVE-2026-88070 |
high | 7.8 | 0.0032 | 2026-10-29 | Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privilege | |
CVE-2026-88071 |
high | 7.8 | 0.0031 | 2026-10-29 | Double free in Windows Hyper-V allows an authorized attacker to elevate privileges locally | |
CVE-2026-87715 |
high | 7.0 | 0.0025 | 2026-10-29 | Use after free in Windows Installer allows an authorized attacker to elevate privileges lo | |
CVE-2026-87716 |
high | 7.5 | 0.0112 | 2026-10-29 | Heap-based buffer overflow in Windows Storage Spaces Controller allows an unauthorized att | |
CVE-2026-87712 |
high | 7.8 | 0.0024 | 2026-10-29 | Use after free in Windows Quality of Service (QoS) Packet Scheduler allows an authorized a | |
CVE-2026-87713 |
high | 7.5 | 0.0027 | 2026-10-29 | Use after free in Windows Bluetooth Port Driver allows an unauthorized attacker to elevate | |
CVE-2026-87710 |
high | 7.0 | 0.0015 | 2026-10-29 | Improper access control in Microsoft Local Security Authority Server (lsasrv) allows an au | |
CVE-2026-87711 |
high | 7.8 | 0.0024 | 2026-10-29 | Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate | |
CVE-2026-87692 |
high | 7.8 | 0.0231 | 2026-10-29 | Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attack | |
CVE-2026-85943 |
high | 7.0 | 0.0021 | 2026-10-29 | Time-of-check time-of-use (toctou) race condition in Reliable Multicast Transport Driver ( | |
CVE-2026-85926 |
high | 8.1 | 0.0066 | 2026-10-29 | Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized a | |
CVE-2026-85922 |
high | 7.4 | 0.0061 | 2026-10-29 | Weak authentication in Azure Key Vault allows an unauthorized attacker to bypass a securit | |
CVE-2026-85925 |
high | 8.2 | 0.0053 | 2026-10-29 | Improper restriction of communication channel to intended endpoints in Azure Key Vault all | |
CVE-2026-85918 |
high | 7.0 | 0.0025 | 2026-10-29 | Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized | |
CVE-2026-85920 |
high | 7.0 | 0.0016 | 2026-10-29 | Time-of-check time-of-use (toctou) race condition in Windows BitLocker allows an authorize | |
CVE-2026-85915 |
high | 7.8 | 0.0031 | 2026-10-29 | Heap-based buffer overflow in Windows PCI Bus Driver allows an authorized attacker to elev | |
CVE-2026-85914 |
high | 7.0 | 0.0020 | 2026-10-29 | Use after free in Windows Embedded Mode Service allows an authorized attacker to elevate p | |
CVE-2026-85903 |
high | 8.8 | 0.0070 | 2026-10-29 | Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute cod |