Browse All CVEs
50,449 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-72981 |
high | 8.1 | 0.0071 | 2026-10-30 | Use after free in IP Helper allows an unauthorized attacker to execute code over a network | |
CVE-2026-72980 |
medium | 4.4 | 0.0057 | 2026-10-30 | Uncontrolled search path element in Windows Hello allows an authorized attacker to bypass | |
CVE-2026-72979 |
critical | 9.8 | 0.0097 | 2026-10-30 | Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over | |
CVE-2026-72978 |
medium | 5.9 | 0.0098 | 2026-10-30 | Allocation of resources without limits or throttling in Active Directory Federation Servic | |
CVE-2026-72963 |
high | 7.0 | 0.0026 | 2026-10-30 | Use after free in Windows Modern Execution Server allows an authorized attacker to elevate | |
CVE-2026-72962 |
high | 8.2 | 0.0035 | 2026-10-30 | Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to el | |
CVE-2026-72958 |
high | 8.2 | 0.0035 | 2026-10-30 | Double free in Windows Credential Guard allows an authorized attacker to elevate privilege | |
CVE-2026-72949 |
high | 7.5 | 0.0117 | 2026-10-30 | Null pointer dereference in Windows SMB Server Network Transport Driver (srvnet.sys) allow | |
CVE-2026-72947 |
medium | 6.4 | 0.0027 | 2026-10-30 | Integer underflow (wrap or wraparound) in Windows File History Service allows an authorize | |
CVE-2026-72946 |
high | 7.8 | 0.0033 | 2026-10-30 | Heap-based buffer overflow in Storage Port Driver allows an authorized attacker to elevate | |
CVE-2026-72945 |
medium | 5.5 | 0.0040 | 2026-10-30 | Use of uninitialized resource in Windows Task Scheduler allows an authorized attacker to d | |
CVE-2026-72944 |
high | 7.8 | 0.0033 | 2026-10-30 | Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate | |
CVE-2026-72943 |
high | 7.5 | 0.0066 | 2026-10-30 | Use after free in Windows Deployment Services allows an authorized attacker to execute cod | |
CVE-2026-72940 |
high | 8.8 | 0.0082 | 2026-10-30 | Heap-based buffer overflow in Windows Schannel allows an unauthorized attacker to execute | |
CVE-2026-72939 |
medium | 6.5 | 0.0114 | 2026-10-30 | Null pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an aut | |
CVE-2026-72937 |
medium | 5.5 | 0.0040 | 2026-10-30 | Out-of-bounds read in Storage Port Driver allows an authorized attacker to disclose inform | |
CVE-2026-72935 |
medium | 6.7 | 0.0035 | 2026-10-30 | Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges loc | |
CVE-2026-72930 |
high | 7.0 | 0.0026 | 2026-10-30 | Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized att | |
CVE-2026-72929 |
high | 7.8 | 0.0023 | 2026-10-30 | Improper validation of integrity check value in Windows Installer allows an authorized att | |
CVE-2026-72926 |
high | 7.0 | 0.0026 | 2026-10-30 | Use after free in Windows Internet Connection Sharing (ICS) allows an authorized attacker | |
CVE-2026-71353 |
high | 7.0 | 0.0026 | 2026-10-30 | Double free in Windows Routing and Remote Access Service (RRAS) allows an authorized attac | |
CVE-2026-71351 |
high | 7.0 | 0.0026 | 2026-10-30 | Double free in Windows Routing and Remote Access Service (RRAS) allows an authorized attac | |
CVE-2026-71350 |
medium | 6.8 | 0.0044 | 2026-10-30 | Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to exe | |
CVE-2026-71348 |
medium | 6.8 | 0.0044 | 2026-10-30 | Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to exe | |
CVE-2026-71345 |
high | 7.8 | 0.0033 | 2026-10-30 | Out-of-bounds write in Windows Spaceport.sys allows an authorized attacker to execute code | |
CVE-2026-71343 |
high | 7.8 | 0.0033 | 2026-10-30 | Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorize | |
CVE-2026-71341 |
medium | 5.5 | 0.0040 | 2026-10-30 | Out-of-bounds read in Windows Partition Management Driver allows an authorized attacker to | |
CVE-2026-71340 |
high | 7.0 | 0.0026 | 2026-10-30 | Use after free in Windows File History Service allows an authorized attacker to elevate pr | |
CVE-2026-71338 |
medium | 6.4 | 0.0028 | 2026-10-30 | Double free in Windows Failover Cluster allows an authorized attacker to elevate privilege | |
CVE-2026-71337 |
high | 7.8 | 0.0033 | 2026-10-30 | Stack-based buffer overflow in Windows Storage Management Provider allows an authorized at | |
CVE-2026-71336 |
high | 8.8 | 0.0091 | 2026-10-30 | Integer overflow or wraparound in Windows Work Folder Service allows an authorized attacke | |
CVE-2026-71334 |
high | 7.8 | 0.0033 | 2026-10-30 | Heap-based buffer overflow in Windows NFS Portmapper allows an authorized attacker to elev | |
CVE-2026-71333 |
high | 7.0 | 0.0026 | 2026-10-30 | Use after free in Windows Remote Access Connection Manager allows an authorized attacker t | |
CVE-2026-71332 |
high | 7.0 | 0.0026 | 2026-10-30 | Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized att | |
CVE-2026-71330 |
high | 7.5 | 0.0103 | 2026-10-30 | Exposure of sensitive system information to an unauthorized control sphere in Windows Serv | |
CVE-2026-71329 |
medium | 6.8 | 0.0044 | 2026-10-30 | Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code | |
CVE-2026-70587 |
high | 7.5 | 0.0103 | 2026-10-30 | Improper null termination in Windows Remote Desktop Protocol allows an unauthorized attack | |
CVE-2026-70586 |
high | 8.8 | 0.0082 | 2026-10-30 | Heap-based buffer overflow in Windows Paint allows an unauthorized attacker to execute cod | |
CVE-2026-70585 |
high | 7.0 | 0.0026 | 2026-10-30 | Use after free in Windows Services for NFS ONCRPC XDR Driver allows an authorized attacker | |
CVE-2026-70584 |
high | 7.8 | 0.0033 | 2026-10-30 | Access of resource using incompatible type ('type confusion') in Windows Core Messaging al | |
CVE-2026-70582 |
medium | 6.4 | 0.0021 | 2026-10-30 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-70564 |
high | 7.8 | 0.0033 | 2026-10-30 | Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attack | |
CVE-2026-70563 |
high | 8.1 | 0.0085 | 2026-10-30 | Improper link resolution before file access ('link following') in Windows Shell allows an | |
CVE-2026-70562 |
high | 7.0 | 0.0026 | 2026-10-30 | Double free in Windows Audio Service allows an authorized attacker to elevate privileges l | |
CVE-2026-70351 |
high | 8.8 | 0.0082 | 2026-10-30 | Integer overflow or wraparound in Microsoft WebP Image Extension allows an unauthorized at | |
CVE-2026-70342 |
high | 8.1 | 0.0071 | 2026-10-30 | Use after free in Windows Ancillary Function Driver for WinSock allows an unauthorized att | |
CVE-2026-70334 |
high | 7.8 | 0.0049 | 2026-10-30 | Incomplete list of disallowed inputs in Visual Studio Code allows an unauthorized attacker | |
CVE-2026-70290 |
medium | 5.5 | 0.0040 | 2026-10-30 | Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attac | |
CVE-2026-70289 |
high | 7.8 | 0.0033 | 2026-10-30 | Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker | |
CVE-2026-70283 |
high | 7.0 | 0.0024 | 2026-10-30 | Incorrect authorization in Windows Win32K allows an authorized attacker to elevate privile |