Browse All CVEs
10,181 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-96247 |
medium | 5.5 | 0.0039 | 2026-10-29 | Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker | |
CVE-2026-96218 |
medium | 5.5 | 0.0055 | 2026-10-29 | Improper access control in Windows Update Stack allows an authorized attacker to perform t | |
CVE-2026-96204 |
medium | 6.5 | 0.0078 | 2026-10-29 | Server-side request forgery (ssrf) in Azure Arc allows an authorized attacker to elevate p | |
CVE-2026-96183 |
medium | 5.5 | 0.0038 | 2026-10-29 | Missing authentication for critical function in Windows Health and Optimized Experiences S | |
CVE-2026-95904 |
medium | 5.5 | 0.0030 | 2026-10-29 | Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclos | |
CVE-2026-94506 |
medium | 6.5 | 0.0095 | 2026-10-29 | Out-of-bounds read in Microsoft Office Access allows an unauthorized attacker to disclose | |
CVE-2026-88208 |
medium | 4.6 | 0.0027 | 2026-10-29 | Improper neutralization of input during web page generation ('cross-site scripting') in Mi | |
CVE-2026-88209 |
medium | 4.6 | 0.0036 | 2026-10-29 | Improper neutralization of input during web page generation ('cross-site scripting') in Mi | |
CVE-2026-88201 |
medium | 6.5 | 0.0063 | 2026-10-29 | Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose inf | |
CVE-2026-88175 |
medium | 6.5 | 0.0084 | 2026-10-29 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose i | |
CVE-2026-88169 |
medium | 6.5 | 0.0084 | 2026-10-29 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose in | |
CVE-2026-88167 |
medium | 6.5 | 0.0086 | 2026-10-29 | Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose info | |
CVE-2026-88162 |
medium | 5.5 | 0.0028 | 2026-10-29 | Improper authorization in Windows Encrypting File System (EFS) allows an authorized attack | |
CVE-2026-88158 |
medium | 5.5 | 0.0029 | 2026-10-29 | Out-of-bounds read in Microsoft Digest Authentication allows an authorized attacker to dis | |
CVE-2026-88153 |
medium | 6.5 | 0.0083 | 2026-10-29 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose i | |
CVE-2026-88151 |
medium | 6.5 | 0.0083 | 2026-10-29 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose i | |
CVE-2026-88137 |
medium | 6.5 | 0.0095 | 2026-10-29 | Files or directories accessible to external parties in WebDAV allows an authorized attacke | |
CVE-2026-88132 |
medium | 5.9 | 0.0032 | 2026-10-29 | Origin validation error in Azure Key Vault allows an unauthorized attacker to disclose inf | |
CVE-2026-88099 |
medium | 5.9 | 0.0082 | 2026-10-29 | Uncaught exception in Windows Failover Cluster allows an unauthorized attacker to deny ser | |
CVE-2026-87714 |
medium | 6.5 | 0.0045 | 2026-10-29 | Missing authorization in WebDAV allows an authorized attacker to bypass a security feature | |
CVE-2026-85916 |
medium | 6.2 | 0.0043 | 2026-10-29 | Exposure of private personal information to an unauthorized actor in Azure Active Director | |
CVE-2026-85873 |
medium | 6.5 | 0.0096 | 2026-10-29 | Improper authorization in Skype for Business and Microsoft Lync allows an authorized attac | |
CVE-2026-85865 |
medium | 5.5 | 0.0028 | 2026-10-29 | Improper authentication in Windows DHCP Server allows an authorized attacker to bypass a s | |
CVE-2026-85859 |
medium | 6.5 | 0.0079 | 2026-10-29 | Null pointer dereference in Windows Message Queuing Queue Manager allows an authorized att | |
CVE-2026-85857 |
medium | 5.5 | 0.0046 | 2026-10-29 | Insertion of sensitive information into log file in Windows Kernel-Mode Drivers allows an | |
CVE-2026-85852 |
medium | 5.5 | 0.0039 | 2026-10-29 | Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to | |
CVE-2026-85847 |
medium | 6.5 | 0.0065 | 2026-10-29 | Out-of-bounds read in Windows Print Spooler Components allows an unauthorized attacker to | |
CVE-2026-85841 |
medium | 6.6 | 0.0063 | 2026-10-29 | Use after free in Windows DHCP Server allows an authorized attacker to execute code over a | |
CVE-2026-85840 |
medium | 6.5 | 0.0095 | 2026-10-29 | Files or directories accessible to external parties in Windows Event Viewer allows an auth | |
CVE-2026-85835 |
medium | 5.5 | 0.0040 | 2026-10-29 | Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose info | |
CVE-2026-85830 |
medium | 5.5 | 0.0039 | 2026-10-29 | Out-of-bounds read in Windows Installer allows an authorized attacker to disclose informat | |
CVE-2026-85831 |
medium | 5.5 | 0.0039 | 2026-10-29 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to d | |
CVE-2026-85821 |
medium | 6.5 | 0.0095 | 2026-10-29 | Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an au | |
CVE-2026-85815 |
medium | 5.5 | 0.0039 | 2026-10-29 | Out-of-bounds read in Windows Device Association Service allows an authorized attacker to | |
CVE-2026-85816 |
medium | 5.7 | 0.0052 | 2026-10-29 | Out-of-bounds read in Windows Wi-Fi Driver allows an authorized attacker to disclose infor | |
CVE-2026-85812 |
medium | 5.5 | 0.0049 | 2026-10-29 | Files or directories accessible to external parties in Windows Bind Filter Driver allows a | |
CVE-2026-85805 |
medium | 6.5 | 0.0059 | 2026-10-29 | Improperly implemented security check for standard in Windows PowerShell allows an unautho | |
CVE-2026-85797 |
medium | 6.5 | 0.0091 | 2026-10-29 | Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information | |
CVE-2026-85794 |
medium | 5.5 | 0.0039 | 2026-10-29 | Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an authorize | |
CVE-2026-85793 |
medium | 5.5 | 0.0046 | 2026-10-29 | Exposure of sensitive system information to an unauthorized control sphere in Windows Sysm | |
CVE-2026-85374 |
medium | 5.5 | 0.0039 | 2026-10-29 | Out-of-bounds read in Windows Installer allows an authorized attacker to disclose informat | |
CVE-2026-85337 |
medium | 6.5 | 0.0087 | 2026-10-29 | Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose in | |
CVE-2026-85336 |
medium | 5.5 | 0.0039 | 2026-10-29 | Out-of-bounds read in Windows Device Association Service allows an authorized attacker to | |
CVE-2026-85333 |
medium | 6.7 | 0.0020 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-85331 |
medium | 6.5 | 0.0095 | 2026-10-29 | Out-of-bounds read in Windows Device Association Service allows an authorized attacker to | |
CVE-2026-85323 |
medium | 6.8 | 0.0048 | 2026-10-29 | Weak authentication in Network Device Enrollment Service (NDES) allows an authorized attac | |
CVE-2026-85320 |
medium | 5.5 | 0.0030 | 2026-10-29 | Use of uninitialized resource in Windows Print Spooler Components allows an authorized att | |
CVE-2026-84011 |
medium | 5.5 | 0.0028 | 2026-10-29 | Incorrect authorization in Windows SMB Client allows an authorized attacker to bypass a se | |
CVE-2026-84007 |
medium | 6.5 | 0.0100 | 2026-10-29 | Out-of-bounds read in Remote Desktop Gateway Service allows an authorized attacker to disc | |
CVE-2026-84009 |
medium | 4.7 | 0.0020 | 2026-10-29 | Time-of-check time-of-use (toctou) race condition in Windows Projected File System allows |