Browse All CVEs
50,447 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-77480 |
high | 8.8 | 0.0078 | 2026-10-30 | Insufficient granularity of access control in SQL Server allows an authorized attacker to | |
CVE-2026-73028 |
high | 8.8 | 0.0078 | 2026-10-30 | Improper access control in SQL Server allows an authorized attacker to elevate privileges | |
CVE-2026-73026 |
high | 7.8 | 0.0033 | 2026-10-30 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to e | |
CVE-2026-73025 |
critical | 9.8 | 0.0090 | 2026-10-30 | Weak authentication in Windows iSCSI allows an unauthorized attacker to bypass a security | |
CVE-2026-73024 |
high | 7.8 | 0.0033 | 2026-10-30 | Heap-based buffer overflow in Windows Services for NFS ONCRPC XDR Driver allows an authori | |
CVE-2026-73023 |
high | 8.8 | 0.0082 | 2026-10-30 | Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to | |
CVE-2026-73022 |
high | 7.0 | 0.0026 | 2026-10-30 | Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to | |
CVE-2026-73021 |
high | 7.8 | 0.0033 | 2026-10-30 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to e | |
CVE-2026-73020 |
high | 7.8 | 0.0033 | 2026-10-30 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to e | |
CVE-2026-73019 |
medium | 4.3 | 0.0077 | 2026-10-30 | Improper resolution of path equivalence in Windows URL Moniker allows an unauthorized atta | |
CVE-2026-73018 |
high | 8.8 | 0.0082 | 2026-10-30 | Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute cod | |
CVE-2026-73017 |
high | 7.5 | 0.0028 | 2026-10-30 | Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to exe | |
CVE-2026-73015 |
high | 7.8 | 0.0033 | 2026-10-30 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to e | |
CVE-2026-73014 |
high | 7.8 | 0.0030 | 2026-10-30 | Missing authorization in Data Sharing Service Client allows an authorized attacker to elev | |
CVE-2026-73013 |
high | 8.8 | 0.0082 | 2026-10-30 | Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to | |
CVE-2026-73012 |
high | 8.8 | 0.0091 | 2026-10-30 | Heap-based buffer overflow in Windows Management Services allows an authorized attacker to | |
CVE-2026-73011 |
high | 7.8 | 0.0033 | 2026-10-30 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to e | |
CVE-2026-73010 |
critical | 9.8 | 0.0097 | 2026-10-30 | Use after free in Windows Failover Cluster allows an unauthorized attacker to execute code | |
CVE-2026-73009 |
critical | 9.8 | 0.0097 | 2026-10-30 | Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized a | |
CVE-2026-73008 |
medium | 5.5 | 0.0048 | 2026-10-30 | Exposure of private personal information to an unauthorized actor in Windows Biometric Ser | |
CVE-2026-73007 |
high | 7.8 | 0.0033 | 2026-10-30 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to e | |
CVE-2026-73006 |
high | 8.8 | 0.0082 | 2026-10-30 | Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacke | |
CVE-2026-73005 |
high | 7.0 | 0.0020 | 2026-10-30 | Use after free in Windows Authentication Methods allows an authorized attacker to elevate | |
CVE-2026-73004 |
medium | 5.5 | 0.0030 | 2026-10-30 | Missing authentication for critical function in Windows Autopilot allows an authorized att | |
CVE-2026-73003 |
high | 7.0 | 0.0026 | 2026-10-30 | Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to | |
CVE-2026-73002 |
high | 7.8 | 0.0033 | 2026-10-30 | Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker | |
CVE-2026-73001 |
high | 7.8 | 0.0033 | 2026-10-30 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to e | |
CVE-2026-73000 |
high | 7.8 | 0.0033 | 2026-10-30 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to e | |
CVE-2026-72999 |
medium | 6.8 | 0.0044 | 2026-10-30 | Out-of-bounds read in Windows USB Hub Driver allows an unauthorized attacker to elevate pr | |
CVE-2026-72997 |
high | 7.8 | 0.0033 | 2026-10-30 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to e | |
CVE-2026-72996 |
high | 7.8 | 0.0033 | 2026-10-30 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to e | |
CVE-2026-72995 |
high | 7.8 | 0.0033 | 2026-10-30 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to e | |
CVE-2026-72994 |
high | 7.8 | 0.0033 | 2026-10-30 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to e | |
CVE-2026-72993 |
high | 7.8 | 0.0033 | 2026-10-30 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to e | |
CVE-2026-72992 |
high | 7.8 | 0.0033 | 2026-10-30 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to e | |
CVE-2026-72991 |
high | 7.8 | 0.0033 | 2026-10-30 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to e | |
CVE-2026-72990 |
high | 7.8 | 0.0033 | 2026-10-30 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to e | |
CVE-2026-72989 |
high | 7.5 | 0.0103 | 2026-10-30 | Use of uninitialized resource in Windows Failover Cluster allows an unauthorized attacker | |
CVE-2026-72988 |
high | 7.8 | 0.0033 | 2026-10-30 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to e | |
CVE-2026-72987 |
high | 8.1 | 0.0071 | 2026-10-30 | Use after free in Windows DNS allows an unauthorized attacker to execute code over a netwo | |
CVE-2026-72985 |
medium | 6.8 | 0.0044 | 2026-10-30 | Heap-based buffer overflow in Windows Volume Shadow Copy allows an unauthorized attacker t | |
CVE-2026-72977 |
medium | 6.5 | 0.0097 | 2026-10-30 | Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to discl | |
CVE-2026-72976 |
medium | 5.0 | 0.0051 | 2026-10-30 | Out-of-bounds read in Microsoft Office Word allows an authorized attacker to disclose info | |
CVE-2026-72975 |
medium | 6.5 | 0.0092 | 2026-10-30 | Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to discl | |
CVE-2026-72974 |
medium | 6.5 | 0.0092 | 2026-10-30 | Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose inf | |
CVE-2026-72973 |
high | 8.8 | 0.0082 | 2026-10-30 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to exe | |
CVE-2026-72972 |
high | 8.8 | 0.0082 | 2026-10-30 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to exe | |
CVE-2026-72967 |
high | 7.8 | 0.0033 | 2026-10-30 | Heap-based buffer overflow in Windows Network Connection Broker allows an authorized attac | |
CVE-2026-72966 |
medium | 5.5 | 0.0030 | 2026-10-30 | Missing authorization in Windows Remote Access Connection Manager allows an authorized att | |
CVE-2026-72965 |
high | 7.8 | 0.0033 | 2026-10-30 | Use after free in Windows WebClient Service allows an authorized attacker to elevate privi |