Browse All CVEs
50,447 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-66818 |
high | 8.8 | 0.0078 | 2026-10-30 | Improper privilege management in SQL Server allows an authorized attacker to elevate privi | |
CVE-2026-66816 |
medium | 6.5 | 0.0100 | 2026-10-30 | Insufficient logging in SQL Server allows an authorized attacker to bypass a security feat | |
CVE-2026-66814 |
high | 8.8 | 0.0078 | 2026-10-30 | Insufficient granularity of access control in SQL Server allows an authorized attacker to | |
CVE-2026-66305 |
high | 7.1 | 0.0053 | 2026-10-30 | Use of client-side authentication in Skype for Business allows an authorized attacker to p | |
CVE-2026-65669 |
critical | 9.6 | 0.0086 | 2026-10-30 | Improper neutralization of special elements in output used by a downstream component ('inj | |
CVE-2026-63523 |
medium | 6.5 | 0.0055 | 2026-10-30 | Improper neutralization of input during web page generation ('cross-site scripting') in Sk | |
CVE-2026-62813 |
high | 7.5 | 0.0066 | 2026-10-30 | Use after free in Active Directory Domain Services allows an authorized attacker to execut | |
CVE-2026-62810 |
high | 7.8 | 0.0033 | 2026-10-30 | Heap-based buffer overflow in Active Directory Certificate Services (AD CS) allows an auth | |
CVE-2026-62801 |
medium | 6.5 | 0.0076 | 2026-10-30 | Improper limitation of a pathname to a restricted directory ('path traversal') in Windows | |
CVE-2026-62762 |
medium | 6.5 | 0.0114 | 2026-10-30 | Null pointer dereference in Active Directory Domain Services allows an authorized attacker | |
CVE-2026-62759 |
high | 7.5 | 0.0038 | 2026-10-30 | Authentication bypass by spoofing in Windows Netlogon allows an unauthorized attacker to p | |
CVE-2026-62697 |
high | 7.8 | 0.0033 | 2026-10-30 | Use after free in Windows Push Notifications allows an authorized attacker to elevate priv | |
CVE-2026-58611 |
high | 7.8 | 0.0031 | 2026-10-30 | Improper authorization in XBox Gaming Services allows an authorized attacker to elevate pr | |
CVE-2026-58600 |
high | 7.8 | 0.0047 | 2026-10-30 | Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized atta | |
CVE-2026-56198 |
high | 7.8 | 0.0033 | 2026-10-30 | Out-of-bounds read in Microsoft Trace Data Helper allows an authorized attacker to elevate | |
CVE-2026-56177 |
high | 7.8 | 0.0033 | 2026-10-30 | Use after free in Windows Server allows an authorized attacker to elevate privileges local | |
CVE-2026-56172 |
high | 7.8 | 0.0033 | 2026-10-30 | Use after free in Windows VHD miniport driver allows an authorized attacker to elevate pri | |
CVE-2026-55007 |
high | 8.1 | 0.0071 | 2026-10-30 | Double free in Microsoft Exchange Server allows an unauthorized attacker to execute code o | |
CVE-2026-63184 |
high | 7.1 | 0.0041 | 2026-10-30 | Refitter is a tool for generating a C# REST API client using the Refit library. Prior to 2 | |
CVE-2026-88097 |
high | 8.1 | 0.0026 | 2026-10-30 | Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to eleva | |
CVE-2026-85893 |
high | 8.8 | 0.0082 | 2026-10-30 | Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to eleva | |
CVE-2026-85887 |
high | 7.7 | 0.0084 | 2026-10-30 | Incorrect permission assignment for critical resource in M365 Copilot allows an authorized | |
CVE-2026-85878 |
critical | 9.9 | 0.0078 | 2026-10-30 | Improper authorization in Azure Database for PostgreSQL allows an authorized attacker to e | |
CVE-2026-85875 |
medium | 5.5 | 0.0054 | 2026-10-30 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose i | |
CVE-2026-84003 |
high | 7.4 | 0.0060 | 2026-10-30 | Authentication bypass by capture-replay in Microsoft Authentication Library (MSAL) for Nod | |
CVE-2026-84000 |
high | 7.8 | 0.0033 | 2026-10-30 | Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker t | |
CVE-2026-83997 |
high | 8.1 | 0.0071 | 2026-10-30 | Use after free in Windows Message Queuing allows an unauthorized attacker to execute code | |
CVE-2026-83995 |
high | 7.8 | 0.0033 | 2026-10-30 | Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privil | |
CVE-2026-83992 |
high | 8.8 | 0.0082 | 2026-10-30 | Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to | |
CVE-2026-83990 |
high | 7.8 | 0.0033 | 2026-10-30 | Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker | |
CVE-2026-83989 |
high | 7.5 | 0.0117 | 2026-10-30 | Out-of-bounds read in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized at | |
CVE-2026-83987 |
high | 7.8 | 0.0033 | 2026-10-30 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to e | |
CVE-2026-83985 |
high | 7.8 | 0.0033 | 2026-10-30 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to e | |
CVE-2026-83983 |
high | 7.8 | 0.0033 | 2026-10-30 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to e | |
CVE-2026-83982 |
high | 7.8 | 0.0033 | 2026-10-30 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to e | |
CVE-2026-83981 |
high | 7.8 | 0.0033 | 2026-10-30 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to e | |
CVE-2026-83980 |
high | 7.8 | 0.0033 | 2026-10-30 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to e | |
CVE-2026-83978 |
high | 7.8 | 0.0033 | 2026-10-30 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to e | |
CVE-2026-83977 |
high | 7.8 | 0.0033 | 2026-10-30 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to e | |
CVE-2026-83973 |
high | 7.8 | 0.0033 | 2026-10-30 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to e | |
CVE-2026-83972 |
high | 7.8 | 0.0033 | 2026-10-30 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to e | |
CVE-2026-83971 |
high | 7.8 | 0.0033 | 2026-10-30 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to e | |
CVE-2026-83970 |
high | 7.8 | 0.0033 | 2026-10-30 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to e | |
CVE-2026-83968 |
high | 7.8 | 0.0033 | 2026-10-30 | Use after free in Windows Biometric Service allows an authorized attacker to elevate privi | |
CVE-2026-83967 |
high | 7.8 | 0.0033 | 2026-10-30 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to e | |
CVE-2026-83954 |
high | 7.8 | 0.0033 | 2026-10-30 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to e | |
CVE-2026-83951 |
medium | 5.5 | 0.0054 | 2026-10-30 | Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose info | |
CVE-2026-83949 |
medium | 5.5 | 0.0054 | 2026-10-30 | Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose info | |
CVE-2026-83948 |
high | 8.0 | 0.0059 | 2026-10-30 | Improper neutralization of special elements used in a command ('command injection') in Mic | |
CVE-2026-83946 |
high | 8.2 | 0.0032 | 2026-10-30 | Improper neutralization of input during web page generation ('cross-site scripting') in Az |