Browse All CVEs
13,176 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-83670 |
high | 7.5 | 0.0107 | 2026-10-29 | Out-of-bounds read in Function Discovery Service (fdwsd.dll) allows an unauthorized attack | |
CVE-2026-83666 |
high | 7.0 | 0.0022 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-83665 |
high | 7.5 | 0.0133 | 2026-10-29 | Null pointer dereference in Windows DHCP Server allows an unauthorized attacker to deny se | |
CVE-2026-83659 |
high | 7.8 | 0.0033 | 2026-10-29 | Improper link resolution before file access ('link following') in Windows User Profile Ser | |
CVE-2026-83655 |
high | 7.5 | 0.0133 | 2026-10-29 | Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to deny | |
CVE-2026-83652 |
high | 7.8 | 0.0035 | 2026-10-29 | Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privil | |
CVE-2026-83654 |
high | 7.8 | 0.0032 | 2026-10-29 | Missing authentication for critical function in Windows Modern Device Management (MDM) all | |
CVE-2026-83650 |
high | 7.8 | 0.0035 | 2026-10-29 | Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privi | |
CVE-2026-83647 |
high | 7.5 | 0.0127 | 2026-10-29 | Out-of-bounds read in Active Directory Domain Services allows an unauthorized attacker to | |
CVE-2026-83645 |
high | 7.5 | 0.0122 | 2026-10-29 | Allocation of resources without limits or throttling in Active Directory Federation Servic | |
CVE-2026-83643 |
high | 8.8 | 0.0093 | 2026-10-29 | Stack-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to | |
CVE-2026-83644 |
high | 7.0 | 0.0028 | 2026-10-29 | Use after free in Windows Audio Service allows an authorized attacker to elevate privilege | |
CVE-2026-83642 |
high | 8.8 | 0.0093 | 2026-10-29 | Access of resource using incompatible type ('type confusion') in DNS Server allows an unau | |
CVE-2026-83641 |
high | 7.8 | 0.0035 | 2026-10-29 | Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privi | |
CVE-2026-83635 |
high | 7.5 | 0.0133 | 2026-10-29 | Out-of-bounds read in DNS Server allows an unauthorized attacker to deny service over a ne | |
CVE-2026-83586 |
high | 7.8 | 0.0032 | 2026-10-29 | Weak authentication in Windows Resilient File System (ReFS) Deduplication Service allows a | |
CVE-2026-83587 |
high | 7.8 | 0.0035 | 2026-10-29 | Untrusted pointer dereference in Windows Core Messaging allows an authorized attacker to e | |
CVE-2026-83583 |
high | 7.8 | 0.0034 | 2026-10-29 | Improper access control in Windows Geotag Broker allows an authorized attacker to elevate | |
CVE-2026-83580 |
high | 7.0 | 0.0032 | 2026-10-29 | Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authoriz | |
CVE-2026-83569 |
high | 7.8 | 0.0036 | 2026-10-29 | Heap-based buffer overflow in HID Parser Library allows an authorized attacker to elevate | |
CVE-2026-83523 |
high | 8.8 | 0.0093 | 2026-10-29 | Heap-based buffer overflow in Windows Image Acquisition allows an unauthorized attacker to | |
CVE-2026-83564 |
high | 7.0 | 0.0030 | 2026-10-29 | Use after free in Microsoft Windows Search Component allows an authorized attacker to elev | |
CVE-2026-83522 |
high | 8.1 | 0.0080 | 2026-10-29 | Reliance on untrusted inputs in a security decision in Windows IKE Extension allows an una | |
CVE-2026-83518 |
high | 7.8 | 0.0038 | 2026-10-29 | Heap-based buffer overflow in RPC Runtime allows an authorized attacker to elevate privile | |
CVE-2026-83516 |
high | 7.5 | 0.0133 | 2026-10-29 | Out-of-bounds read in Windows Local Security Authority Subsystem Service (LSASS) allows an | |
CVE-2026-83513 |
high | 7.8 | 0.0038 | 2026-10-29 | Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an author | |
CVE-2026-83514 |
high | 7.8 | 0.0038 | 2026-10-29 | Heap-based buffer overflow in Windows Partition Management Driver allows an authorized att | |
CVE-2026-77910 |
high | 8.8 | 0.0087 | 2026-10-29 | Incorrect authorization in Microsoft Exchange Server allows an authorized attacker to elev | |
CVE-2026-77902 |
high | 8.8 | 0.0089 | 2026-10-29 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to ex | |
CVE-2026-70571 |
high | 8.1 | 0.0139 | 2026-10-29 | Stack-based buffer overflow in Microsoft Exchange Server allows an unauthorized attacker t | |
CVE-2026-70303 |
high | 7.8 | 0.0042 | 2026-10-29 | Out-of-bounds write in Windows Kernel allows an authorized attacker to elevate privileges | |
CVE-2026-70301 |
high | 8.8 | 0.0091 | 2026-10-29 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to exe | |
CVE-2026-70302 |
high | 8.8 | 0.0091 | 2026-10-29 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to exe | |
CVE-2026-70297 |
high | 8.8 | 0.0116 | 2026-10-29 | Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized atta | |
CVE-2026-70287 |
high | 8.8 | 0.0091 | 2026-10-29 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to exe | |
CVE-2026-70285 |
high | 7.8 | 0.0038 | 2026-10-29 | Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker | |
CVE-2026-70282 |
high | 8.8 | 0.0091 | 2026-10-29 | Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to | |
CVE-2026-70276 |
high | 7.0 | 0.0029 | 2026-10-29 | Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate p | |
CVE-2026-70269 |
high | 8.1 | 0.0079 | 2026-10-29 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to exe | |
CVE-2026-70268 |
high | 8.8 | 0.0091 | 2026-10-29 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to exe | |
CVE-2026-70266 |
high | 8.8 | 0.0108 | 2026-10-29 | Improper neutralization of special elements used in an sql command ('sql injection') in Mi | |
CVE-2026-70267 |
high | 7.2 | 0.0101 | 2026-10-29 | Inclusion of functionality from untrusted control sphere in Microsoft Office SharePoint al | |
CVE-2026-70257 |
high | 8.8 | 0.0091 | 2026-10-29 | Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to | |
CVE-2026-70256 |
high | 8.8 | 0.0091 | 2026-10-29 | Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to | |
CVE-2026-70251 |
high | 7.5 | 0.0062 | 2026-10-29 | Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized att | |
CVE-2026-70220 |
high | 7.8 | 0.0044 | 2026-10-29 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to exe | |
CVE-2026-70213 |
high | 8.0 | 0.0039 | 2026-10-29 | Origin validation error in Microsoft Power Apps allows an authorized attacker to execute c | |
CVE-2026-70198 |
high | 7.0 | 0.0030 | 2026-10-29 | Use after free in Windows Push Notifications allows an authorized attacker to elevate priv | |
CVE-2026-70186 |
high | 7.5 | 0.0096 | 2026-10-29 | Deadlock in ASP.NET Core allows an unauthorized attacker to deny service over a network. | |
CVE-2026-70187 |
high | 8.1 | 0.0078 | 2026-10-29 | Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execut |