All Critical High Medium Low
CVE Severity CVSS EPSS First Seen Flags Description
CVE-2026-27913 high 7.7 0.0030 2026-10-29 Improper input validation in Windows BitLocker allows an unauthorized attacker to bypass a
CVE-2026-27914 high 7.8 0.0243 2026-10-29 Improper access control in Microsoft Management Console allows an authorized attacker to e
CVE-2026-27915 high 7.8 0.0030 2026-10-29 Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized
CVE-2026-27916 high 7.8 0.0024 2026-10-29 Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized
CVE-2026-27917 high 7.0 0.0024 2026-10-29 Use after free in Windows WFP NDIS Lightweight Filter Driver (wfplwfs.sys) allows an autho
CVE-2026-27918 high 7.0 0.0019 2026-10-29 Concurrent execution using shared resource with improper synchronization ('race condition'
CVE-2026-27919 high 7.8 0.0030 2026-10-29 Untrusted pointer dereference in Windows Universal Plug and Play (UPnP) Device Host allows
CVE-2026-27920 high 7.8 0.0024 2026-10-29 Untrusted pointer dereference in Windows Universal Plug and Play (UPnP) Device Host allows
CVE-2026-27921 high 7.0 0.0119 2026-10-29 Concurrent execution using shared resource with improper synchronization ('race condition'
CVE-2026-27922 high 7.0 0.0020 2026-10-29 Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attac
CVE-2026-27923 high 7.8 0.0023 2026-10-29 Use after free in Desktop Window Manager allows an authorized attacker to elevate privileg
CVE-2026-27924 high 7.8 0.0029 2026-10-29 Use after free in Desktop Window Manager allows an authorized attacker to elevate privileg
CVE-2026-27926 high 7.0 0.0018 2026-10-29 Concurrent execution using shared resource with improper synchronization ('race condition'
CVE-2026-27927 high 7.0 0.0019 2026-10-29 Concurrent execution using shared resource with improper synchronization ('race condition'
CVE-2026-27928 high 8.7 0.0041 2026-10-29 Improper input validation in Windows Hello allows an unauthorized attacker to bypass a sec
CVE-2026-27929 high 7.0 0.0019 2026-10-29 Time-of-check time-of-use (toctou) race condition in Windows LUAFV allows an authorized at
CVE-2026-32068 high 7.0 0.0016 2026-10-29 Concurrent execution using shared resource with improper synchronization ('race condition'
CVE-2026-32069 high 7.8 0.0026 2026-10-29 Double free in Windows Projected File System allows an authorized attacker to elevate priv
CVE-2026-32070 high 7.0 0.0032 2026-10-29 Use after free in Windows Common Log File System Driver allows an authorized attacker to e
CVE-2026-32071 high 7.5 0.0106 2026-10-29 Null pointer dereference in Windows Local Security Authority Subsystem Service (LSASS) all
CVE-2026-32073 high 7.0 0.0035 2026-10-29 Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attac
CVE-2026-32074 high 7.8 0.0026 2026-10-29 Double free in Windows Projected File System allows an authorized attacker to elevate priv
CVE-2026-32075 high 7.0 0.0027 2026-10-29 Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized
CVE-2026-32076 high 7.8 0.0026 2026-10-29 Out-of-bounds read in Windows Storage Spaces Controller allows an authorized attacker to e
CVE-2026-32077 high 7.8 0.0032 2026-10-29 Untrusted pointer dereference in Windows Universal Plug and Play (UPnP) Device Host allows
CVE-2026-32078 high 7.8 0.0026 2026-10-29 Use after free in Windows Projected File System allows an authorized attacker to elevate p
CVE-2026-32080 high 7.0 0.0021 2026-10-29 Use after free in Windows WalletService allows an authorized attacker to elevate privilege
CVE-2026-32082 high 7.0 0.0020 2026-10-29 Concurrent execution using shared resource with improper synchronization ('race condition'
CVE-2026-32083 high 7.0 0.0020 2026-10-29 Concurrent execution using shared resource with improper synchronization ('race condition'
CVE-2026-32086 high 7.0 0.0016 2026-10-29 Concurrent execution using shared resource with improper synchronization ('race condition'
CVE-2026-32087 high 7.0 0.0025 2026-10-29 Heap-based buffer overflow in Function Discovery Service (fdwsd.dll) allows an authorized
CVE-2026-32089 high 7.8 0.0025 2026-10-29 Use after free in Windows Speech Brokered Api allows an authorized attacker to elevate pri
CVE-2026-32090 high 7.0 0.0021 2026-10-29 Concurrent execution using shared resource with improper synchronization ('race condition'
CVE-2026-32091 high 7.0 0.0016 2026-10-29 Concurrent execution using shared resource with improper synchronization ('race condition'
CVE-2026-32093 high 7.0 0.0112 2026-10-29 Concurrent execution using shared resource with improper synchronization ('race condition'
CVE-2026-32149 high 7.3 0.0032 2026-10-29 Improper input validation in Windows Hyper-V allows an authorized attacker to execute code
CVE-2026-32150 high 7.0 0.0016 2026-10-29 Concurrent execution using shared resource with improper synchronization ('race condition'
CVE-2026-32152 high 7.8 0.0046 2026-10-29 Use after free in Desktop Window Manager allows an authorized attacker to elevate privileg
CVE-2026-32153 high 7.8 0.0020 2026-10-29 Use after free in Microsoft Windows Speech allows an authorized attacker to elevate privil
CVE-2026-32154 high 7.8 0.0038 2026-10-29 Use after free in Desktop Window Manager allows an authorized attacker to elevate privileg
CVE-2026-32155 high 7.8 0.0026 2026-10-29 Use after free in Desktop Window Manager allows an authorized attacker to elevate privileg