Browse All CVEs
49,628 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-85833 |
high | 7.8 | 0.0031 | 2026-10-29 | Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to | |
CVE-2026-85830 |
medium | 5.5 | 0.0039 | 2026-10-29 | Out-of-bounds read in Windows Installer allows an authorized attacker to disclose informat | |
CVE-2026-85831 |
medium | 5.5 | 0.0039 | 2026-10-29 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to d | |
CVE-2026-85829 |
high | 7.8 | 0.0031 | 2026-10-29 | Double free in Windows Wired AutoConfig Service allows an authorized attacker to elevate p | |
CVE-2026-85827 |
high | 7.0 | 0.0020 | 2026-10-29 | Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges l | |
CVE-2026-85828 |
high | 7.0 | 0.0025 | 2026-10-29 | Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges l | |
CVE-2026-85825 |
high | 7.0 | 0.0019 | 2026-10-29 | Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an author | |
CVE-2026-85826 |
high | 7.0 | 0.0025 | 2026-10-29 | Out-of-bounds write in Windows Fast FAT Driver allows an authorized attacker to elevate pr | |
CVE-2026-85823 |
high | 7.0 | 0.0025 | 2026-10-29 | Use after free in Windows Composite Image File System allows an authorized attacker to ele | |
CVE-2026-85824 |
high | 7.0 | 0.0019 | 2026-10-29 | Use after free in Windows Composite Image File System allows an authorized attacker to ele | |
CVE-2026-85821 |
medium | 6.5 | 0.0095 | 2026-10-29 | Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an au | |
CVE-2026-85822 |
high | 7.8 | 0.0031 | 2026-10-29 | Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to e | |
CVE-2026-85820 |
high | 7.8 | 0.0031 | 2026-10-29 | Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an author | |
CVE-2026-85817 |
high | 8.8 | 0.0072 | 2026-10-29 | Reliance on untrusted inputs in a security decision in Windows PowerShell allows an unauth | |
CVE-2026-85818 |
critical | 9.0 | 0.0041 | 2026-10-29 | Improper verification of cryptographic signature in Windows Schannel allows an unauthorize | |
CVE-2026-85815 |
medium | 5.5 | 0.0039 | 2026-10-29 | Out-of-bounds read in Windows Device Association Service allows an authorized attacker to | |
CVE-2026-85816 |
medium | 5.7 | 0.0052 | 2026-10-29 | Out-of-bounds read in Windows Wi-Fi Driver allows an authorized attacker to disclose infor | |
CVE-2026-85812 |
medium | 5.5 | 0.0049 | 2026-10-29 | Files or directories accessible to external parties in Windows Bind Filter Driver allows a | |
CVE-2026-85814 |
critical | 9.8 | 0.0093 | 2026-10-29 | Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized at | |
CVE-2026-85810 |
high | 7.0 | 0.0025 | 2026-10-29 | Use after free in Windows Telephony Server allows an authorized attacker to elevate privil | |
CVE-2026-85811 |
high | 7.5 | 0.0035 | 2026-10-29 | Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute c | |
CVE-2026-85809 |
critical | 9.8 | 0.0093 | 2026-10-29 | Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker | |
CVE-2026-85807 |
high | 7.8 | 0.0031 | 2026-10-29 | Integer overflow or wraparound in Windows USB Video Driver allows an authorized attacker t | |
CVE-2026-85808 |
high | 7.5 | 0.0112 | 2026-10-29 | Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthori | |
CVE-2026-85805 |
medium | 6.5 | 0.0059 | 2026-10-29 | Improperly implemented security check for standard in Windows PowerShell allows an unautho | |
CVE-2026-85806 |
critical | 9.8 | 0.0091 | 2026-10-29 | Integer underflow (wrap or wraparound) in Network Policy Server (NPS) allows an unauthoriz | |
CVE-2026-85803 |
high | 7.0 | 0.0025 | 2026-10-29 | Use after free in Windows Camera Frame Server Monitor allows an authorized attacker to ele | |
CVE-2026-85804 |
high | 7.8 | 0.0034 | 2026-10-29 | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate | |
CVE-2026-85802 |
high | 7.0 | 0.0026 | 2026-10-29 | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate | |
CVE-2026-85799 |
high | 8.1 | 0.0066 | 2026-10-29 | Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute c | |
CVE-2026-85800 |
high | 7.8 | 0.0031 | 2026-10-29 | Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to ele | |
CVE-2026-85797 |
medium | 6.5 | 0.0091 | 2026-10-29 | Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information | |
CVE-2026-85798 |
high | 7.2 | 0.0087 | 2026-10-29 | Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized a | |
CVE-2026-85795 |
high | 7.8 | 0.0031 | 2026-10-29 | Use after free in Windows Text Services Framework allows an authorized attacker to elevate | |
CVE-2026-85796 |
high | 7.8 | 0.0031 | 2026-10-29 | Numeric truncation error in Windows Installer allows an authorized attacker to elevate pri | |
CVE-2026-85794 |
medium | 5.5 | 0.0039 | 2026-10-29 | Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an authorize | |
CVE-2026-85792 |
critical | 9.8 | 0.0089 | 2026-10-29 | Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker | |
CVE-2026-85793 |
medium | 5.5 | 0.0046 | 2026-10-29 | Exposure of sensitive system information to an unauthorized control sphere in Windows Sysm | |
CVE-2026-85791 |
high | 7.0 | 0.0028 | 2026-10-29 | Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized at | |
CVE-2026-85377 |
high | 7.8 | 0.0031 | 2026-10-29 | Access of resource using incompatible type ('type confusion') in Windows CD-ROM Driver all | |
CVE-2026-85375 |
high | 7.8 | 0.0031 | 2026-10-29 | Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized | |
CVE-2026-85376 |
high | 7.8 | 0.0028 | 2026-10-29 | Weak authentication in Windows Print Spooler Components allows an authorized attacker to e | |
CVE-2026-85374 |
medium | 5.5 | 0.0039 | 2026-10-29 | Out-of-bounds read in Windows Installer allows an authorized attacker to disclose informat | |
CVE-2026-85372 |
high | 7.0 | 0.0025 | 2026-10-29 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges local | |
CVE-2026-85373 |
high | 7.8 | 0.0031 | 2026-10-29 | Heap-based buffer overflow in Windows Universal Plug and Play (UPnP) Device Host allows an | |
CVE-2026-85370 |
high | 7.0 | 0.0025 | 2026-10-29 | Use after free in WebDAV allows an authorized attacker to elevate privileges locally. | |
CVE-2026-85371 |
high | 8.1 | 0.0067 | 2026-10-29 | Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute c | |
CVE-2026-85365 |
high | 7.0 | 0.0020 | 2026-10-29 | Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to ele | |
CVE-2026-85337 |
medium | 6.5 | 0.0087 | 2026-10-29 | Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose in | |
CVE-2026-85338 |
high | 7.8 | 0.0032 | 2026-10-29 | Out-of-bounds read in Microsoft Graphics Component allows an authorized attacker to elevat |