Browse All CVEs
10,438 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-83706 |
medium | 6.7 | 0.0037 | 2026-10-29 | Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally | |
CVE-2026-83705 |
medium | 5.5 | 0.0090 | 2026-10-29 | Exposure of sensitive system information to an unauthorized control sphere in Windows HTTP | |
CVE-2026-83703 |
medium | 6.5 | 0.0066 | 2026-10-29 | Out-of-bounds read in Windows Wi-Fi Driver allows an unauthorized attacker to deny service | |
CVE-2026-83697 |
medium | 4.7 | 0.0023 | 2026-10-29 | Time-of-check time-of-use (toctou) race condition in Windows Modern Device Management (MDM | |
CVE-2026-83695 |
medium | 5.5 | 0.0047 | 2026-10-29 | Use of uninitialized resource in Windows Event Logging Service allows an authorized attack | |
CVE-2026-83685 |
medium | 6.5 | 0.0129 | 2026-10-29 | Buffer over-read in Windows IKE Extension allows an authorized attacker to deny service ov | |
CVE-2026-83686 |
medium | 5.5 | 0.0046 | 2026-10-29 | Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to | |
CVE-2026-83683 |
medium | 6.5 | 0.0128 | 2026-10-29 | Absolute path traversal in Windows Encrypting File System (EFS) allows an authorized attac | |
CVE-2026-83671 |
medium | 6.5 | 0.0046 | 2026-10-29 | Out-of-bounds read in Windows Hyper-V allows an authorized attacker to disclose informatio | |
CVE-2026-83672 |
medium | 4.7 | 0.0072 | 2026-10-29 | Exposure of sensitive system information to an unauthorized control sphere in Windows Inst | |
CVE-2026-83667 |
medium | 6.5 | 0.0123 | 2026-10-29 | Out-of-bounds read in Active Directory Domain Services allows an authorized attacker to de | |
CVE-2026-83668 |
medium | 5.5 | 0.0039 | 2026-10-29 | Out-of-bounds read in Windows WLAN Service allows an authorized attacker to disclose infor | |
CVE-2026-83664 |
medium | 5.5 | 0.0039 | 2026-10-29 | Access of resource using incompatible type ('type confusion') in Windows Portable Device F | |
CVE-2026-83658 |
medium | 5.5 | 0.0034 | 2026-10-29 | Improper access control in Windows Error Reporting allows an authorized attacker to disclo | |
CVE-2026-83656 |
medium | 4.7 | 0.0026 | 2026-10-29 | Missing authentication for critical function in Windows Modern Device Management (MDM) all | |
CVE-2026-83657 |
medium | 5.5 | 0.0027 | 2026-10-29 | Weak authentication in Windows Modern Device Management (MDM) allows an authorized attacke | |
CVE-2026-83651 |
medium | 6.5 | 0.0104 | 2026-10-29 | Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information | |
CVE-2026-83648 |
medium | 6.5 | 0.0123 | 2026-10-29 | Null pointer dereference in Active Directory Domain Services allows an authorized attacker | |
CVE-2026-83649 |
medium | 6.5 | 0.0123 | 2026-10-29 | Out-of-bounds read in Windows Local Security Authority Subsystem Service (LSASS) allows an | |
CVE-2026-83646 |
medium | 4.8 | 0.0037 | 2026-10-29 | Url redirection to untrusted site ('open redirect') in Active Directory Federation Service | |
CVE-2026-83571 |
medium | 5.5 | 0.0046 | 2026-10-29 | Null pointer dereference in Windows Audio Service allows an authorized attacker to disclos | |
CVE-2026-83521 |
medium | 6.5 | 0.0113 | 2026-10-29 | Out-of-bounds read in Windows IKE Extension allows an authorized attacker to disclose info | |
CVE-2026-83515 |
medium | 6.5 | 0.0104 | 2026-10-29 | Use of uninitialized resource in RPC Runtime allows an unauthorized attacker to disclose i | |
CVE-2026-70298 |
medium | 6.5 | 0.0123 | 2026-10-29 | Improper limitation of a pathname to a restricted directory ('path traversal') in Microsof | |
CVE-2026-70295 |
medium | 5.5 | 0.0046 | 2026-10-29 | Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disc | |
CVE-2026-70293 |
medium | 5.5 | 0.0046 | 2026-10-29 | Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attac | |
CVE-2026-70294 |
medium | 5.5 | 0.0046 | 2026-10-29 | Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disc | |
CVE-2026-70292 |
medium | 5.5 | 0.0046 | 2026-10-29 | Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disc | |
CVE-2026-70288 |
medium | 5.5 | 0.0035 | 2026-10-29 | Time-of-check time-of-use (toctou) race condition in Windows Win32 Kernel Subsystem allows | |
CVE-2026-70284 |
medium | 5.5 | 0.0046 | 2026-10-29 | Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attac | |
CVE-2026-70263 |
medium | 6.5 | 0.0100 | 2026-10-29 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose in | |
CVE-2026-70264 |
medium | 5.5 | 0.0049 | 2026-10-29 | Improper link resolution before file access ('link following') in Microsoft Defender allow | |
CVE-2026-70259 |
medium | 6.5 | 0.0092 | 2026-10-29 | Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized att | |
CVE-2026-70244 |
medium | 6.5 | 0.0104 | 2026-10-29 | Out-of-bounds read in DNS Server allows an unauthorized attacker to disclose information o | |
CVE-2026-70206 |
medium | 6.5 | 0.0097 | 2026-10-29 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose in | |
CVE-2026-70196 |
medium | 5.9 | 0.0091 | 2026-10-29 | Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to deny | |
CVE-2026-70189 |
medium | 6.7 | 0.0033 | 2026-10-29 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code loc | |
CVE-2026-70166 |
medium | 6.5 | 0.0129 | 2026-10-29 | Out-of-bounds read in Windows DNS allows an authorized attacker to deny service over a net | |
CVE-2026-70119 |
medium | 6.5 | 0.0129 | 2026-10-29 | Out-of-bounds read in Windows DNS allows an authorized attacker to execute code over a net | |
CVE-2026-70097 |
medium | 5.6 | 0.0022 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-70087 |
medium | 5.5 | 0.0032 | 2026-10-29 | Incorrect authorization in DNS Server allows an authorized attacker to bypass a security f | |
CVE-2026-70085 |
medium | 5.5 | 0.0032 | 2026-10-29 | Missing authorization in DNS Server allows an authorized attacker to perform tampering loc | |
CVE-2026-70083 |
medium | 5.5 | 0.0032 | 2026-10-29 | Incorrect authorization in DNS Server allows an authorized attacker to perform tampering l | |
CVE-2026-70074 |
medium | 5.5 | 0.0046 | 2026-10-29 | Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information lo | |
CVE-2026-70071 |
medium | 5.5 | 0.0026 | 2026-10-29 | Improper verification of cryptographic signature in DNS Server allows an authorized attack | |
CVE-2026-70041 |
medium | 5.5 | 0.0046 | 2026-10-29 | Buffer over-read in Windows CD-ROM Driver allows an authorized attacker to disclose inform | |
CVE-2026-70044 |
medium | 5.5 | 0.0059 | 2026-10-29 | Out-of-bounds read in Microsoft Windows Media Foundation allows an unauthorized attacker t | |
CVE-2026-70025 |
medium | 5.3 | 0.0108 | 2026-10-29 | Use after free in Windows Netlogon allows an authorized attacker to deny service over a ne | |
CVE-2026-70017 |
medium | 5.5 | 0.0046 | 2026-10-29 | Access of resource using incompatible type ('type confusion') in Windows Secure Kernel Mod | |
CVE-2026-69999 |
medium | 5.5 | 0.0046 | 2026-10-29 | Out-of-bounds read in Windows Update allows an authorized attacker to disclose information |