Browse All CVEs
50,447 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-68846 |
high | 7.1 | 0.0057 | 2026-10-30 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges over | |
CVE-2026-68845 |
high | 7.8 | 0.0033 | 2026-10-30 | Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an au | |
CVE-2026-68844 |
high | 7.8 | 0.0033 | 2026-10-30 | Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attac | |
CVE-2026-68843 |
medium | 5.5 | 0.0040 | 2026-10-30 | Use after free in Microsoft Office Word allows an authorized attacker to disclose informat | |
CVE-2026-68842 |
medium | 5.5 | 0.0048 | 2026-10-30 | Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI | |
CVE-2026-68841 |
high | 7.8 | 0.0033 | 2026-10-30 | Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privil | |
CVE-2026-68840 |
high | 7.0 | 0.0020 | 2026-10-30 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-68839 |
critical | 9.8 | 0.0102 | 2026-10-30 | Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized | |
CVE-2026-68838 |
high | 8.0 | 0.0077 | 2026-10-30 | Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privi | |
CVE-2026-68837 |
high | 7.0 | 0.0026 | 2026-10-30 | Use after free in Windows File History Service allows an authorized attacker to elevate pr | |
CVE-2026-68835 |
high | 7.1 | 0.0057 | 2026-10-30 | Use after free in Windows Print Spooler Components allows an authorized attacker to elevat | |
CVE-2026-68834 |
high | 8.0 | 0.0077 | 2026-10-30 | Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privi | |
CVE-2026-68832 |
high | 7.8 | 0.0033 | 2026-10-30 | Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate pr | |
CVE-2026-68831 |
medium | 5.5 | 0.0055 | 2026-10-30 | Files or directories accessible to external parties in Windows Defender Firewall Service a | |
CVE-2026-68830 |
medium | 5.5 | 0.0037 | 2026-10-30 | Improper link resolution before file access ('link following') in Windows Universal Plug a | |
CVE-2026-68828 |
high | 8.8 | 0.0082 | 2026-10-30 | Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to exe | |
CVE-2026-68827 |
high | 8.0 | 0.0077 | 2026-10-30 | Integer underflow (wrap or wraparound) in Windows GDI+ allows an authorized attacker to el | |
CVE-2026-68825 |
high | 7.0 | 0.0026 | 2026-10-30 | Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate priv | |
CVE-2026-68824 |
high | 7.0 | 0.0020 | 2026-10-30 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-68787 |
high | 7.8 | 0.0033 | 2026-10-30 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code loc | |
CVE-2026-68786 |
high | 8.8 | 0.0091 | 2026-10-30 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code ove | |
CVE-2026-68785 |
medium | 4.9 | 0.0112 | 2026-10-30 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code ove | |
CVE-2026-68784 |
medium | 6.5 | 0.0100 | 2026-10-30 | Out-of-bounds read in SQL Server allows an authorized attacker to disclose information ove | |
CVE-2026-68780 |
medium | 6.5 | 0.0100 | 2026-10-30 | Out-of-bounds read in SQL Server allows an authorized attacker to disclose information ove | |
CVE-2026-68779 |
medium | 6.5 | 0.0100 | 2026-10-30 | Out-of-bounds read in SQL Server allows an authorized attacker to disclose information ove | |
CVE-2026-68778 |
medium | 6.5 | 0.0100 | 2026-10-30 | Out-of-bounds read in SQL Server allows an authorized attacker to disclose information ove | |
CVE-2026-68777 |
medium | 6.5 | 0.0100 | 2026-10-30 | Out-of-bounds read in SQL Server allows an authorized attacker to disclose information ove | |
CVE-2026-68776 |
medium | 6.5 | 0.0100 | 2026-10-30 | Use of uninitialized resource in SQL Server allows an authorized attacker to disclose info | |
CVE-2026-68775 |
high | 8.8 | 0.0091 | 2026-10-30 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code ove | |
CVE-2026-67648 |
medium | 6.5 | 0.0100 | 2026-10-30 | Use of uninitialized resource in SQL Server allows an authorized attacker to disclose info | |
CVE-2026-67643 |
critical | 9.8 | 0.0097 | 2026-10-30 | Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code o | |
CVE-2026-67642 |
high | 8.8 | 0.0091 | 2026-10-30 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code ove | |
CVE-2026-67641 |
medium | 6.5 | 0.0114 | 2026-10-30 | Integer overflow or wraparound in SQL Server allows an authorized attacker to deny service | |
CVE-2026-67639 |
high | 8.8 | 0.0091 | 2026-10-30 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code ove | |
CVE-2026-67638 |
high | 8.8 | 0.0091 | 2026-10-30 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code ove | |
CVE-2026-67636 |
critical | 9.0 | 0.0071 | 2026-10-30 | Out-of-bounds read in SQL Server allows an unauthorized attacker to execute code over a ne | |
CVE-2026-67393 |
medium | 6.5 | 0.0100 | 2026-10-30 | Buffer over-read in SQL Server allows an authorized attacker to disclose information over | |
CVE-2026-67390 |
medium | 6.5 | 0.0100 | 2026-10-30 | Buffer over-read in SQL Server allows an authorized attacker to disclose information over | |
CVE-2026-67389 |
medium | 6.5 | 0.0100 | 2026-10-30 | Out-of-bounds read in SQL Server allows an authorized attacker to disclose information ove | |
CVE-2026-67388 |
high | 8.8 | 0.0091 | 2026-10-30 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code ove | |
CVE-2026-67386 |
medium | 6.5 | 0.0100 | 2026-10-30 | Use of uninitialized resource in SQL Server allows an authorized attacker to disclose info | |
CVE-2026-67385 |
high | 8.8 | 0.0091 | 2026-10-30 | Use after free in SQL Server allows an authorized attacker to execute code over a network. | |
CVE-2026-67384 |
high | 8.8 | 0.0091 | 2026-10-30 | Integer overflow or wraparound in SQL Server allows an authorized attacker to execute code | |
CVE-2026-67383 |
medium | 6.5 | 0.0100 | 2026-10-30 | Generation of error message containing sensitive information in SQL Server allows an autho | |
CVE-2026-67381 |
high | 8.8 | 0.0091 | 2026-10-30 | Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileg | |
CVE-2026-67380 |
high | 8.8 | 0.0091 | 2026-10-30 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code ove | |
CVE-2026-67379 |
high | 8.5 | 0.0066 | 2026-10-30 | Stack-based buffer overflow in SQL Server allows an authorized attacker to execute code ov | |
CVE-2026-67378 |
critical | 9.0 | 0.0071 | 2026-10-30 | Untrusted pointer dereference in SQL Server allows an unauthorized attacker to execute cod | |
CVE-2026-67376 |
high | 7.5 | 0.0117 | 2026-10-30 | Integer overflow or wraparound in SQL Server allows an unauthorized attacker to deny servi | |
CVE-2026-66820 |
high | 8.8 | 0.0099 | 2026-10-30 | Improper neutralization of special elements used in an sql command ('sql injection') in SQ |