Browse All CVEs
3,393 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-83523 |
critical | 9.8 | 0.0095 | 2026-10-29 | Heap-based buffer overflow in Windows Image Acquisition allows an unauthorized attacker to | |
CVE-2026-83519 |
critical | 9.8 | 0.0108 | 2026-10-29 | Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to e | |
CVE-2026-83517 |
critical | 9.8 | 0.0108 | 2026-10-29 | Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized at | |
CVE-2026-70300 |
critical | 9.8 | 0.0113 | 2026-10-29 | Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to | |
CVE-2026-70291 |
critical | 9.8 | 0.0133 | 2026-10-29 | Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to | |
CVE-2026-70279 |
critical | 9.3 | 0.0129 | 2026-10-29 | Improper neutralization of input during web page generation ('cross-site scripting') in Mi | |
CVE-2026-70188 |
critical | 9.1 | 0.0094 | 2026-10-29 | Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NE | |
CVE-2026-70096 |
critical | 9.8 | 0.0109 | 2026-10-29 | Heap-based buffer overflow in Windows Rich Text Edit Control allows an unauthorized attack | |
CVE-2026-70024 |
critical | 9.8 | 0.0096 | 2026-10-29 | Stack-based buffer overflow in Windows Internet Information Services allows an unauthorize | |
CVE-2026-69886 |
critical | 9.8 | 0.0095 | 2026-10-29 | Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to | |
CVE-2026-69883 |
critical | 9.8 | 0.0095 | 2026-10-29 | Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a net | |
CVE-2026-69705 |
critical | 9.8 | 0.0097 | 2026-10-29 | Out-of-bounds write in Windows iSCSI allows an unauthorized attacker to execute code over | |
CVE-2026-102238 |
critical | 9.6 | 0.0082 | 2026-10-29 | Improper limitation of a pathname to a restricted directory ('path traversal') in Visual S | |
CVE-2026-97816 |
critical | 9.8 | 0.0101 | 2026-10-29 | Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over | |
CVE-2026-97814 |
critical | 9.8 | 0.0109 | 2026-10-29 | Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to exec | |
CVE-2026-97815 |
critical | 9.8 | 0.0087 | 2026-10-29 | Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to e | |
CVE-2026-97805 |
critical | 9.8 | 0.0106 | 2026-10-29 | Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker | |
CVE-2026-96934 |
critical | 9.8 | 0.0094 | 2026-10-29 | Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over | |
CVE-2026-96924 |
critical | 9.8 | 0.0101 | 2026-10-29 | Untrusted pointer dereference in Windows OLE allows an unauthorized attacker to execute co | |
CVE-2026-96909 |
critical | 9.8 | 0.0099 | 2026-10-29 | Heap-based buffer overflow in Windows BitLocker allows an unauthorized attacker to execute | |
CVE-2026-96320 |
critical | 9.8 | 0.0105 | 2026-10-29 | Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execu | |
CVE-2026-96252 |
critical | 9.1 | 0.0056 | 2026-10-29 | Improper verification of cryptographic signature in Active Directory Federation Services ( | |
CVE-2026-96207 |
critical | 10.0 | 0.0067 | 2026-10-29 | Improper certificate validation in Microsoft Partner Center allows an unauthorized attacke | |
CVE-2026-96113 |
critical | 9.8 | 0.0087 | 2026-10-29 | Heap-based buffer overflow in DNS Server allows an unauthorized attacker to execute code o | |
CVE-2026-94510 |
critical | 9.9 | 0.0057 | 2026-10-29 | Authorization bypass through user-controlled key in Microsoft Bookings allows an unauthori | |
CVE-2026-88131 |
critical | 9.8 | 0.0123 | 2026-10-29 | Deserialization of untrusted data in Microsoft Dataverse allows an unauthorized attacker t | |
CVE-2026-88092 |
critical | 9.4 | 0.0093 | 2026-10-29 | Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NE | |
CVE-2026-77900 |
critical | 9.8 | 0.0072 | 2026-10-29 | Missing authentication for critical function in Azure App Service allows an unauthorized a | |
CVE-2026-70242 |
critical | 9.8 | 0.0157 | 2026-10-29 | Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to | |
CVE-2026-69435 |
critical | 9.6 | 0.0056 | 2026-10-29 | Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileg | |
CVE-2026-102210 |
critical | 9.8 | 0.0099 | 2026-10-29 | Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to exec | |
CVE-2026-100222 |
critical | 9.8 | 0.0106 | 2026-10-29 | Heap-based buffer overflow in Network Policy Server (NPS) allows an unauthorized attacker | |
CVE-2026-100219 |
critical | 9.8 | 0.0111 | 2026-10-29 | Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a ne | |
CVE-2026-100202 |
critical | 9.8 | 0.0111 | 2026-10-29 | Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to | |
CVE-2026-69836 |
critical | 10.0 | 0.0153 | 2026-10-29 | 2 PoC | Deserialization of untrusted data in Microsoft Entra ID allows an unauthorized attacker to |
CVE-2026-69851 |
critical | 9.9 | 0.0078 | 2026-10-29 | Server-side request forgery (ssrf) in Azure Active Directory allows an authorized attacker | |
CVE-2026-68789 |
critical | 9.9 | 0.0099 | 2026-10-29 | Improper neutralization of special elements used in an sql command ('sql injection') in Az | |
CVE-2026-65801 |
critical | 10.0 | 0.0090 | 2026-10-29 | Server-side request forgery (ssrf) in Microsoft Exchange Online allows an unauthorized att | |
CVE-2026-62893 |
critical | 9.8 | 0.0097 | 2026-10-29 | Use after free in Windows Deployment Services allows an unauthorized attacker to execute c | |
CVE-2026-62878 |
critical | 9.8 | 0.0097 | 2026-10-29 | 1 PoC | Stack-based buffer overflow in Windows DNS allows an unauthorized attacker to execute code |
CVE-2026-62834 |
critical | 9.3 | 0.0053 | 2026-10-29 | Improper verification of cryptographic signature in Azure Data Factory allows an unauthori | |
CVE-2026-62815 |
critical | 9.8 | 0.0097 | 2026-10-29 | Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a ne | |
CVE-2026-57092 |
critical | 9.9 | 0.0091 | 2026-10-29 | Use after free in Windows VMSwitch allows an authorized attacker to elevate privileges ove | |
CVE-2026-56190 |
critical | 9.8 | 0.0097 | 2026-10-29 | 1 PoC | Use of uninitialized resource in Windows RDP allows an unauthorized attacker to execute co |
CVE-2026-56188 |
critical | 9.8 | 0.0061 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-56159 |
critical | 9.8 | 0.0097 | 2026-10-29 | Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execu | |
CVE-2026-55008 |
critical | 9.6 | 0.0086 | 2026-10-29 | Improper neutralization of input during web page generation ('cross-site scripting') in Mi | |
CVE-2026-54990 |
critical | 9.8 | 0.0082 | 2026-10-29 | Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to exe | |
CVE-2026-54118 |
critical | 9.8 | 0.0153 | 2026-10-29 | Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute | |
CVE-2026-54117 |
critical | 9.8 | 0.0153 | 2026-10-29 | Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute |