Browse All CVEs
10,475 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-61936 |
medium | 5.5 | 0.0030 | 2026-10-29 | Missing authorization in Windows Defender Firewall Service allows an authorized attacker t | |
CVE-2026-61933 |
medium | 5.5 | 0.0040 | 2026-10-29 | Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose i | |
CVE-2026-61928 |
medium | 5.5 | 0.0023 | 2026-10-29 | Cleartext storage of sensitive information in Windows Hello allows an authorized attacker | |
CVE-2026-61924 |
medium | 6.5 | 0.0092 | 2026-10-29 | Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose in | |
CVE-2026-61368 |
medium | 5.0 | 0.0043 | 2026-10-29 | Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to disclose in | |
CVE-2026-61350 |
medium | 4.6 | 0.0047 | 2026-10-29 | Buffer over-read in Windows NTFS allows an unauthorized attacker to disclose information w | |
CVE-2026-61347 |
medium | 5.5 | 0.0040 | 2026-10-29 | Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclos | |
CVE-2026-61345 |
medium | 6.5 | 0.0114 | 2026-10-29 | Null pointer dereference in Microsoft Remote Registry Service allows an authorized attacke | |
CVE-2026-59137 |
medium | 5.5 | 0.0040 | 2026-10-29 | Use of uninitialized resource in Windows Event Logging Service allows an authorized attack | |
CVE-2026-59138 |
medium | 6.5 | 0.0114 | 2026-10-29 | Null pointer dereference in Microsoft Remote Registry Service allows an authorized attacke | |
CVE-2026-59135 |
medium | 5.5 | 0.0035 | 2026-10-29 | Weak authentication in Microsoft Windows Search Component allows an authorized attacker to | |
CVE-2026-59136 |
medium | 5.5 | 0.0040 | 2026-10-29 | Use of uninitialized resource in Microsoft COM for Windows allows an authorized attacker t | |
CVE-2026-59128 |
medium | 5.5 | 0.0040 | 2026-10-29 | Out-of-bounds read in Windows Encrypting File System (EFS) allows an authorized attacker t | |
CVE-2026-59130 |
medium | 5.6 | 0.0037 | 2026-10-29 | No cwe for this issue in AMD Zen allows an authorized attacker to disclose information loc | |
CVE-2026-58638 |
medium | 6.0 | 0.0024 | 2026-10-29 | Missing cryptographic step in Windows Boot Loader allows an authorized attacker to bypass | |
CVE-2026-58614 |
medium | 5.5 | 0.0040 | 2026-10-29 | Out-of-bounds read in Windows Kernel allows an authorized attacker to bypass a security fe | |
CVE-2026-58547 |
medium | 5.5 | 0.0041 | 2026-10-29 | Heap-based buffer overflow in Universal Plug and Play (upnp.dll) allows an authorized atta | |
CVE-2026-58546 |
medium | 6.5 | 0.0092 | 2026-10-29 | Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose i | |
CVE-2026-58545 |
medium | 5.5 | 0.0035 | 2026-10-29 | Improper access control in Windows Kernel allows an authorized attacker to bypass a securi | |
CVE-2026-58543 |
medium | 6.3 | 0.0024 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-58539 |
medium | 6.5 | 0.0092 | 2026-10-29 | Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information | |
CVE-2026-58535 |
medium | 6.5 | 0.0092 | 2026-10-29 | Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose i | |
CVE-2026-58533 |
medium | 6.5 | 0.0092 | 2026-10-29 | Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose i | |
CVE-2026-58528 |
medium | 6.8 | 0.0052 | 2026-10-29 | Out-of-bounds read in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized | |
CVE-2026-57982 |
medium | 6.5 | 0.0100 | 2026-10-29 | Use of uninitialized resource in Windows RDP allows an authorized attacker to disclose inf | |
CVE-2026-57979 |
medium | 6.5 | 0.0092 | 2026-10-29 | Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information | |
CVE-2026-57976 |
medium | 6.5 | 0.0114 | 2026-10-29 | Null pointer dereference in Active Directory Domain Services allows an authorized attacker | |
CVE-2026-57097 |
medium | 6.4 | 0.0050 | 2026-10-29 | Untrusted search path in Microsoft XML allows an unauthorized attacker to bypass a securit | |
CVE-2026-57095 |
medium | 6.2 | 0.0049 | 2026-10-29 | Exposure of sensitive information to an unauthorized actor in Windows Win32K allows an una | |
CVE-2026-57085 |
medium | 5.5 | 0.0037 | 2026-10-29 | Out-of-bounds read in Windows Print Spooler Components allows an authorized attacker to di | |
CVE-2026-56649 |
medium | 5.9 | 0.0070 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-56195 |
medium | 5.5 | 0.0054 | 2026-10-29 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose informa | |
CVE-2026-56192 |
medium | 5.5 | 0.0060 | 2026-10-29 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose informa | |
CVE-2026-56184 |
medium | 5.5 | 0.0048 | 2026-10-29 | Exposure of sensitive information to an unauthorized actor in Windows Win32K allows an aut | |
CVE-2026-56168 |
medium | 6.5 | 0.0114 | 2026-10-29 | Null pointer dereference in Windows SMB Server allows an authorized attacker to deny servi | |
CVE-2026-56157 |
medium | 5.4 | 0.0050 | 2026-10-29 | Improper access control in Microsoft Office SharePoint allows an authorized attacker to pe | |
CVE-2026-55898 |
medium | 6.1 | 0.0047 | 2026-10-29 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose i | |
CVE-2026-55142 |
medium | 5.5 | 0.0060 | 2026-10-29 | Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to discl | |
CVE-2026-55138 |
medium | 5.5 | 0.0054 | 2026-10-29 | Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to | |
CVE-2026-55139 |
medium | 5.5 | 0.0048 | 2026-10-29 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose informa | |
CVE-2026-55135 |
medium | 4.6 | 0.0058 | 2026-10-29 | Improper neutralization of input during web page generation ('cross-site scripting') in Mi | |
CVE-2026-55124 |
medium | 5.5 | 0.0060 | 2026-10-29 | Improper validation of specified type of input in Microsoft Office Word allows an unauthor | |
CVE-2026-55121 |
medium | 5.5 | 0.0051 | 2026-10-29 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose informa | |
CVE-2026-55057 |
medium | 5.5 | 0.0054 | 2026-10-29 | Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to disc | |
CVE-2026-55054 |
medium | 6.5 | 0.0092 | 2026-10-29 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose i | |
CVE-2026-55051 |
medium | 6.5 | 0.0091 | 2026-10-29 | Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized att | |
CVE-2026-55050 |
medium | 5.5 | 0.0060 | 2026-10-29 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose in | |
CVE-2026-55046 |
medium | 5.5 | 0.0054 | 2026-10-29 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose i | |
CVE-2026-55047 |
medium | 5.5 | 0.0060 | 2026-10-29 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose informa | |
CVE-2026-55042 |
medium | 5.5 | 0.0054 | 2026-10-29 | Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to discl |