Browse All CVEs
10,479 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-50418 |
medium | 5.1 | 0.0027 | 2026-10-29 | Improper access control in Windows System allows an unauthorized attacker to bypass a secu | |
CVE-2026-50415 |
medium | 5.3 | 0.0086 | 2026-10-29 | Exposure of sensitive information to an unauthorized actor in Windows Media allows an unau | |
CVE-2026-50409 |
medium | 5.5 | 0.0048 | 2026-10-29 | Exposure of sensitive information to an unauthorized actor in Windows Overlay Filter allow | |
CVE-2026-50408 |
medium | 5.5 | 0.0054 | 2026-10-29 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose i | |
CVE-2026-50401 |
medium | 5.5 | 0.0040 | 2026-10-29 | Out-of-bounds read in Windows Cloud Files Mini Filter Driver allows an authorized attacker | |
CVE-2026-50394 |
medium | 5.5 | 0.0048 | 2026-10-29 | Exposure of sensitive information to an unauthorized actor in Windows Media allows an auth | |
CVE-2026-50389 |
medium | 5.5 | 0.0048 | 2026-10-29 | Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows | |
CVE-2026-50383 |
medium | 6.1 | 0.0040 | 2026-10-29 | Buffer over-read in Windows Print Spooler Components allows an authorized attacker to disc | |
CVE-2026-50381 |
medium | 5.5 | 0.0040 | 2026-10-29 | Access of resource using incompatible type ('type confusion') in Composite Image File Syst | |
CVE-2026-50376 |
medium | 6.5 | 0.0092 | 2026-10-29 | Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose i | |
CVE-2026-50377 |
medium | 5.5 | 0.0041 | 2026-10-29 | Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges l | |
CVE-2026-50374 |
medium | 6.3 | 0.0035 | 2026-10-29 | Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to | |
CVE-2026-50366 |
medium | 6.5 | 0.0114 | 2026-10-29 | Null pointer dereference in Active Directory Domain Services allows an authorized attacker | |
CVE-2026-50352 |
medium | 5.5 | 0.0048 | 2026-10-29 | Exposure of sensitive information to an unauthorized actor in Windows Cryptographic Servic | |
CVE-2026-50350 |
medium | 5.5 | 0.0048 | 2026-10-29 | Exposure of sensitive information to an unauthorized actor in Windows Trusted Runtime Inte | |
CVE-2026-50341 |
medium | 5.5 | 0.0040 | 2026-10-29 | Buffer over-read in Windows NTFS allows an authorized attacker to disclose information loc | |
CVE-2026-50339 |
medium | 5.5 | 0.0048 | 2026-10-29 | Exposure of sensitive information to an unauthorized actor in Windows Push Notifications a | |
CVE-2026-50334 |
medium | 5.5 | 0.0048 | 2026-10-29 | Exposure of sensitive information to an unauthorized actor in Windows Notification allows | |
CVE-2026-50324 |
medium | 5.9 | 0.0086 | 2026-10-29 | Loop with unreachable exit condition ('infinite loop') in Active Directory Federation Serv | |
CVE-2026-50316 |
medium | 5.5 | 0.0048 | 2026-10-29 | Insertion of sensitive information into log file in Windows Kernel allows an authorized at | |
CVE-2026-50312 |
medium | 4.7 | 0.0035 | 2026-10-29 | Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attac | |
CVE-2026-50310 |
medium | 4.7 | 0.0031 | 2026-10-29 | Integer overflow or wraparound in Windows Devices Human Interface allows an authorized att | |
CVE-2026-50303 |
medium | 5.5 | 0.0027 | 2026-10-29 | Use of a cryptographic primitive with a risky implementation in Windows Key Guard allows a | |
CVE-2026-50302 |
medium | 4.2 | 0.0033 | 2026-10-29 | Improper certificate validation in Windows Cryptographic Services allows an unauthorized a | |
CVE-2026-50300 |
medium | 5.5 | 0.0040 | 2026-10-29 | Integer underflow (wrap or wraparound) in Windows Kernel allows an authorized attacker to | |
CVE-2026-50298 |
medium | 6.8 | 0.0044 | 2026-10-29 | Integer overflow or wraparound in Windows Spaceport.sys allows an unauthorized attacker to | |
CVE-2026-50299 |
medium | 6.8 | 0.0044 | 2026-10-29 | Integer overflow or wraparound in Windows Storage Spaces Direct allows an unauthorized att | |
CVE-2026-50295 |
medium | 5.5 | 0.0030 | 2026-10-29 | Improper privilege management in Microsoft Windows DNS allows an authorized attacker to by | |
CVE-2026-50294 |
medium | 6.2 | 0.0051 | 2026-10-29 | Exposure of sensitive system information to an unauthorized control sphere in Windows Kern | |
CVE-2026-49807 |
medium | 6.2 | 0.0051 | 2026-10-29 | Exposure of sensitive information to an unauthorized actor in Windows DirectX allows an un | |
CVE-2026-49804 |
medium | 6.6 | 0.0048 | 2026-10-29 | Heap-based buffer overflow in Windows USB Video Driver allows an unauthorized attacker to | |
CVE-2026-49801 |
medium | 5.5 | 0.0040 | 2026-10-29 | Use of uninitialized resource in Windows SMB allows an authorized attacker to disclose inf | |
CVE-2026-49799 |
medium | 6.5 | 0.0114 | 2026-10-29 | Uncontrolled resource consumption in Windows Local Security Authority Subsystem Service (L | |
CVE-2026-49794 |
medium | 4.6 | 0.0047 | 2026-10-29 | Out-of-bounds read in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized | |
CVE-2026-49180 |
medium | 5.5 | 0.0044 | 2026-10-29 | Improper link resolution before file access ('link following') in Universal Plug and Play | |
CVE-2026-49177 |
medium | 5.5 | 0.0044 | 2026-10-29 | Out-of-bounds read in Windows TCP/IP allows an authorized attacker to disclose information | |
CVE-2026-49174 |
medium | 6.1 | 0.0027 | 2026-10-29 | Missing authentication for critical function in Microsoft Windows DNS allows an authorized | |
CVE-2026-49167 |
medium | 4.7 | 0.0035 | 2026-10-29 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges local | |
CVE-2026-49168 |
medium | 6.8 | 0.0044 | 2026-10-29 | Integer overflow or wraparound in Windows Storage Spaces Direct allows an unauthorized att | |
CVE-2026-48580 |
medium | 5.5 | 0.0054 | 2026-10-29 | Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to | |
CVE-2026-44806 |
medium | 5.3 | 0.0117 | 2026-10-29 | Missing release of memory after effective lifetime in Windows Cryptographic Services allow | |
CVE-2026-41087 |
medium | 5.5 | 0.0048 | 2026-10-29 | Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows | |
CVE-2026-40422 |
medium | 5.5 | 0.0040 | 2026-10-29 | Use of uninitialized resource in Windows File Explorer allows an authorized attacker to di | |
CVE-2026-34349 |
medium | 5.5 | 0.0048 | 2026-10-29 | Exposure of sensitive information to an unauthorized actor in Windows Media allows an auth | |
CVE-2026-34346 |
medium | 5.5 | 0.0027 | 2026-10-29 | Cleartext transmission of sensitive information in Windows Ancillary Function Driver for W | |
CVE-2026-34348 |
medium | 6.5 | 0.0100 | 2026-10-29 | 1 PoC | Protection mechanism failure in Windows Event Logging Service allows an authorized attacke |
CVE-2026-34328 |
medium | 5.5 | 0.0048 | 2026-10-29 | Exposure of sensitive information to an unauthorized actor in Windows Audio Service allows | |
CVE-2026-33842 |
medium | 5.5 | 0.0048 | 2026-10-29 | Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows | |
CVE-2026-70309 |
medium | 5.4 | 0.0021 | 2026-10-29 | Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker | |
CVE-2026-68799 |
medium | 5.5 | 0.0054 | 2026-10-29 | Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to |