Browse All CVEs
50,450 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-63377 |
critical | 9.8 | 0.0040 | 2026-10-30 | TAKO AI Agent for Okta is a local-first AI agent that helps Okta administrators query tena | |
CVE-2026-63346 |
high | 8.6 | 0.0035 | 2026-10-30 | Refitter is a tool for generating a C# REST API client using the Refit library. Prior to 2 | |
CVE-2026-63344 |
high | 8.6 | 0.0035 | 2026-10-30 | Refitter is a tool for generating a C# REST API client using the Refit library. Prior to 2 | |
CVE-2026-111477 |
— | — | — | 2026-10-30 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority | |
CVE-2026-63393 |
high | 8.7 | 0.0050 | 2026-10-30 | OpenSearch SQL supports querying OpenSearch data using SQL and Piped Processing Language. | |
CVE-2026-63338 |
high | 8.3 | 0.0026 | 2026-10-30 | IXP Manager is a full-stack web application for managing Internet Exchange Points. Prior t | |
CVE-2026-63224 |
high | 7.2 | 0.0034 | 2026-10-30 | OpenRemote is an open-source internet-of-things platform. Prior to 1.26.0, the `datapoint | |
CVE-2026-63201 |
high | 7.1 | 0.0043 | 2026-10-30 | Netopeer2 is a server for implementing network configuration management based on the `NETC | |
CVE-2026-63121 |
medium | 6.3 | 0.0019 | 2026-10-30 | Kubewarden policies is a collection of WebAssembly policies for securing and governing Kub | |
CVE-2026-62277 |
medium | 6.5 | 0.0032 | 2026-10-30 | LubeLogger is a self-hosted, open-source, web-based vehicle maintenance and fuel mileage t | |
CVE-2026-55614 |
medium | 6.9 | 0.0040 | 2026-10-30 | uhttpd is a small HTTP server. In unpatched repository snapshots, `client_parse_header()` | |
CVE-2026-55612 |
low | 3.7 | 0.0029 | 2026-10-30 | uhttpd is a small HTTP server. In unpatched repository snapshots, `client_poll_post_data() | |
CVE-2026-63115 |
medium | 5.3 | 0.0014 | 2026-10-30 | ActivityPub is a multi-tenant ActivityPub server for Ghost, built with Fedify. From 1.0.0 | |
CVE-2026-62347 |
medium | 5.9 | 0.0030 | 2026-10-30 | Element Call is a native Matrix video conferencing application. From 0.16.0 until 0.20.3, | |
CVE-2026-55147 |
medium | 6.3 | 0.0022 | 2026-10-30 | LORIS (Longitudinal Online Research and Imaging System) is a self-hosted web application t | |
CVE-2026-55146 |
medium | 4.3 | 0.0021 | 2026-10-30 | LORIS (Longitudinal Online Research and Imaging System) is a self-hosted web application t | |
CVE-2026-63182 |
high | 8.1 | 0.0019 | 2026-10-30 | LightSAML implements SAML 2.0 data model classes, XML serialization and deserialization, X | |
CVE-2026-85921 |
high | 8.2 | 0.0035 | 2026-10-30 | Double free in Windows Secure Kernel Mode allows an authorized attacker to elevate privile | |
CVE-2026-85877 |
high | 8.8 | 0.0082 | 2026-10-30 | Heap-based buffer overflow in Windows Print Spooler Components allows an unauthorized atta | |
CVE-2026-84001 |
high | 7.5 | 0.0117 | 2026-10-30 | Out-of-bounds read in Windows Key Distribution Center allows an unauthorized attacker to d | |
CVE-2026-83999 |
high | 7.0 | 0.0028 | 2026-10-30 | Improper link resolution before file access ('link following') in Windows Resilient File S | |
CVE-2026-83998 |
high | 8.8 | 0.0082 | 2026-10-30 | Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to exe | |
CVE-2026-83996 |
high | 8.8 | 0.0033 | 2026-10-30 | Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to ele | |
CVE-2026-83991 |
medium | 5.5 | 0.0030 | 2026-10-30 | 2 PoC | Missing authentication for critical function in Windows Cloud Files Mini Filter Driver all |
CVE-2026-83988 |
high | 7.8 | 0.0033 | 2026-10-30 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to e | |
CVE-2026-83986 |
high | 7.8 | 0.0033 | 2026-10-30 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to e | |
CVE-2026-83979 |
high | 7.8 | 0.0033 | 2026-10-30 | Use after free in Windows Biometric Service allows an authorized attacker to elevate privi | |
CVE-2026-83976 |
high | 7.8 | 0.0033 | 2026-10-30 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to e | |
CVE-2026-83975 |
high | 7.8 | 0.0033 | 2026-10-30 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to e | |
CVE-2026-83974 |
high | 7.8 | 0.0033 | 2026-10-30 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to e | |
CVE-2026-83969 |
high | 7.8 | 0.0033 | 2026-10-30 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to e | |
CVE-2026-83955 |
high | 7.8 | 0.0033 | 2026-10-30 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to e | |
CVE-2026-83952 |
high | 7.8 | 0.0033 | 2026-10-30 | Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized at | |
CVE-2026-83942 |
high | 7.8 | 0.0030 | 2026-10-30 | Missing authorization in Windows Kernel allows an authorized attacker to elevate privilege | |
CVE-2026-81381 |
medium | 6.5 | 0.0087 | 2026-10-30 | Insufficiently protected credentials in GitHub Copilot and Visual Studio Code allows an un | |
CVE-2026-81380 |
medium | 5.3 | 0.0067 | 2026-10-30 | Improper neutralization of special elements used in a command ('command injection') in Git | |
CVE-2026-81379 |
high | 8.2 | 0.0054 | 2026-10-30 | Not failing securely ('failing open') in Visual Studio Code allows an unauthorized attacke | |
CVE-2026-81378 |
high | 8.2 | 0.0054 | 2026-10-30 | Interpretation conflict in Visual Studio Code allows an unauthorized attacker to bypass a | |
CVE-2026-81377 |
medium | 6.5 | 0.0076 | 2026-10-30 | Improper limitation of a pathname to a restricted directory ('path traversal') in Visual S | |
CVE-2026-81376 |
critical | 9.6 | 0.0090 | 2026-10-30 | Incomplete comparison with missing factors in Visual Studio Code allows an unauthorized at | |
CVE-2026-81357 |
high | 8.2 | 0.0051 | 2026-10-30 | Server-side request forgery (ssrf) in Visual Studio Code allows an unauthorized attacker t | |
CVE-2026-81356 |
high | 8.2 | 0.0054 | 2026-10-30 | Inconsistent interpretation of http requests ('http request/response smuggling') in Visual | |
CVE-2026-81355 |
high | 7.5 | 0.0027 | 2026-10-30 | Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized | |
CVE-2026-81349 |
high | 7.2 | 0.0101 | 2026-10-30 | Improper neutralization of special elements used in an os command ('os command injection') | |
CVE-2026-80097 |
high | 8.6 | 0.0053 | 2026-10-30 | 1 PoC | Improper authentication in Microsoft Authenticator allows an unauthorized attacker to elev |
CVE-2026-80093 |
high | 7.0 | 0.0032 | 2026-10-30 | Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to | |
CVE-2026-80083 |
high | 8.8 | 0.0033 | 2026-10-30 | Untrusted pointer dereference in Windows Hyper-V allows an authorized attacker to execute | |
CVE-2026-80077 |
high | 8.8 | 0.0082 | 2026-10-30 | Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to exe | |
CVE-2026-80075 |
high | 7.8 | 0.0033 | 2026-10-30 | Heap-based buffer overflow in Windows Work Folders allows an authorized attacker to elevat | |
CVE-2026-80074 |
high | 8.8 | 0.0082 | 2026-10-30 | Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to exe |