Browse All CVEs
40,340 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-70157 |
critical | 9.8 | 0.0106 | 2026-10-29 | Heap-based buffer overflow in Windows System Information Console allows an unauthorized at | |
CVE-2026-70158 |
high | 8.8 | 0.0096 | 2026-10-29 | Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker | |
CVE-2026-70159 |
high | 7.5 | 0.0123 | 2026-10-29 | Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorize | |
CVE-2026-70160 |
high | 7.0 | 0.0030 | 2026-10-29 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges local | |
CVE-2026-70161 |
high | 7.3 | 0.0049 | 2026-10-29 | Improper limitation of a pathname to a restricted directory ('path traversal') in .NET all | |
CVE-2026-70162 |
medium | 5.9 | 0.0089 | 2026-10-29 | A denial of service vulnerability exists when Microsoft Common Object Runtime Library impr | |
CVE-2026-70163 |
high | 7.5 | 0.0123 | 2026-10-29 | Allocation of resources without limits or throttling in OpenSSH for Windows allows an unau | |
CVE-2026-70164 |
high | 7.0 | 0.0030 | 2026-10-29 | Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges local | |
CVE-2026-70165 |
medium | 6.7 | 0.0037 | 2026-10-29 | Improper link resolution before file access ('link following') in .NET allows an authorize | |
CVE-2026-70168 |
high | 7.0 | 0.0030 | 2026-10-29 | Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attac | |
CVE-2026-70169 |
high | 7.0 | 0.0021 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-70170 |
medium | 6.5 | 0.0123 | 2026-10-29 | Untrusted pointer dereference in Windows Kernel allows an authorized attacker to deny serv | |
CVE-2026-70172 |
high | 7.8 | 0.0038 | 2026-10-29 | Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate pri | |
CVE-2026-70173 |
medium | 5.5 | 0.0044 | 2026-10-29 | Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to | |
CVE-2026-70174 |
high | 8.8 | 0.0091 | 2026-10-29 | Improperly implemented security check for standard in .NET allows an unauthorized attacker | |
CVE-2026-70176 |
high | 7.0 | 0.0033 | 2026-10-29 | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate | |
CVE-2026-70177 |
high | 7.8 | 0.0035 | 2026-10-29 | Numeric truncation error in Microsoft Windows Search Component allows an authorized attack | |
CVE-2026-70179 |
high | 7.5 | 0.0063 | 2026-10-29 | Authentication bypass by spoofing in ASP.NET Core allows an authorized attacker to elevate | |
CVE-2026-70184 |
high | 7.8 | 0.0042 | 2026-10-29 | Improper resolution of path equivalence in Windows Backup Engine allows an authorized atta | |
CVE-2026-70185 |
high | 8.8 | 0.0030 | 2026-10-29 | Protection mechanism failure in Windows PowerShell allows an authorized attacker to bypass | |
CVE-2026-70190 |
high | 7.3 | 0.0049 | 2026-10-29 | Improper link resolution before file access ('link following') in .NET allows an authorize | |
CVE-2026-70194 |
medium | 6.5 | 0.0049 | 2026-10-29 | Improper certificate validation in .NET Framework allows an unauthorized attacker to bypas | |
CVE-2026-70195 |
medium | 4.7 | 0.0026 | 2026-10-29 | Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attac | |
CVE-2026-70197 |
high | 8.1 | 0.0079 | 2026-10-29 | Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network | |
CVE-2026-70199 |
medium | 5.5 | 0.0093 | 2026-10-29 | Exposure of sensitive system information to an unauthorized control sphere in Windows Kern | |
CVE-2026-70201 |
medium | 5.5 | 0.0045 | 2026-10-29 | Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service lo | |
CVE-2026-70205 |
high | 7.0 | 0.0030 | 2026-10-29 | Access of resource using incompatible type ('type confusion') in Windows Ancillary Functio | |
CVE-2026-70207 |
high | 7.5 | 0.0075 | 2026-10-29 | Heap-based buffer overflow in Network Policy Server (NPS) allows an authorized attacker to | |
CVE-2026-70208 |
medium | 5.5 | 0.0044 | 2026-10-29 | Out-of-bounds read in Windows HTTP.sys allows an authorized attacker to disclose informati | |
CVE-2026-70209 |
high | 7.0 | 0.0030 | 2026-10-29 | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate | |
CVE-2026-70210 |
high | 8.8 | 0.0093 | 2026-10-29 | Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to elevate pr | |
CVE-2026-70211 |
medium | 5.5 | 0.0046 | 2026-10-29 | Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disc | |
CVE-2026-70212 |
high | 7.0 | 0.0027 | 2026-10-29 | Improper restriction of communication channel to intended endpoints in Windows Security Ce | |
CVE-2026-70216 |
medium | 5.5 | 0.0034 | 2026-10-29 | Insufficient granularity of access control in Windows Mobile Device Management allows an a | |
CVE-2026-70218 |
high | 7.8 | 0.0035 | 2026-10-29 | Insufficient granularity of access control in Windows StateRepository API allows an author | |
CVE-2026-70222 |
high | 7.8 | 0.0039 | 2026-10-29 | Relative path traversal in Windows Shell allows an authorized attacker to elevate privileg | |
CVE-2026-70223 |
high | 7.0 | 0.0031 | 2026-10-29 | Use after free in Windows Console Driver allows an authorized attacker to elevate privileg | |
CVE-2026-70225 |
high | 7.8 | 0.0038 | 2026-10-29 | Access of resource using incompatible type ('type confusion') in Windows Ancillary Functio | |
CVE-2026-70227 |
medium | 5.5 | 0.0046 | 2026-10-29 | Out-of-bounds read in Windows Device Association Service allows an authorized attacker to | |
CVE-2026-70228 |
high | 7.8 | 0.0036 | 2026-10-29 | Out-of-bounds read in Desktop Window Manager allows an authorized attacker to elevate priv | |
CVE-2026-70229 |
high | 8.1 | 0.0104 | 2026-10-29 | Incorrect authorization in Active Directory Domain Services allows an unauthorized attacke | |
CVE-2026-70230 |
high | 7.0 | 0.0030 | 2026-10-29 | Use after free in Windows Audio Service allows an authorized attacker to elevate privilege | |
CVE-2026-70232 |
medium | 5.5 | 0.0093 | 2026-10-29 | Exposure of sensitive system information to an unauthorized control sphere in Windows Kern | |
CVE-2026-70233 |
high | 7.8 | 0.0048 | 2026-10-29 | Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized a | |
CVE-2026-70234 |
medium | 5.5 | 0.0042 | 2026-10-29 | Buffer over-read in Desktop Window Manager allows an authorized attacker to disclose infor | |
CVE-2026-70235 |
medium | 5.5 | 0.0032 | 2026-10-29 | Improper authentication in Windows Event Tracing allows an authorized attacker to perform | |
CVE-2026-70236 |
high | 7.0 | 0.0031 | 2026-10-29 | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate | |
CVE-2026-70237 |
high | 7.0 | 0.0032 | 2026-10-29 | Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attac | |
CVE-2026-70238 |
high | 7.8 | 0.0035 | 2026-10-29 | Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attac | |
CVE-2026-70241 |
high | 7.0 | 0.0030 | 2026-10-29 | Use after free in Windows Kerberos allows an authorized attacker to elevate privileges loc |