Browse All CVEs
13,177 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-70187 |
high | 8.1 | 0.0078 | 2026-10-29 | Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execut | |
CVE-2026-70183 |
high | 7.5 | 0.0053 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-70181 |
high | 7.5 | 0.0123 | 2026-10-29 | Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorize | |
CVE-2026-70175 |
high | 8.1 | 0.0073 | 2026-10-29 | Improper authentication in ASP.NET Core allows an unauthorized attacker to elevate privile | |
CVE-2026-70167 |
high | 8.8 | 0.0098 | 2026-10-29 | Access of resource using incompatible type ('type confusion') in DNS Server allows an auth | |
CVE-2026-70155 |
high | 7.5 | 0.0133 | 2026-10-29 | Missing release of memory after effective lifetime in Windows DNS allows an unauthorized a | |
CVE-2026-70127 |
high | 8.1 | 0.0082 | 2026-10-29 | Use after free in DNS Server allows an unauthorized attacker to execute code over a networ | |
CVE-2026-70109 |
high | 7.8 | 0.0047 | 2026-10-29 | Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized a | |
CVE-2026-70110 |
high | 7.8 | 0.0047 | 2026-10-29 | Stack-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized | |
CVE-2026-70104 |
high | 7.8 | 0.0042 | 2026-10-29 | Untrusted pointer dereference in Windows Win32 Kernel Subsystem allows an authorized attac | |
CVE-2026-70106 |
high | 7.8 | 0.0050 | 2026-10-29 | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate priv | |
CVE-2026-70102 |
high | 7.8 | 0.0038 | 2026-10-29 | Use after free in Windows Spaceport.sys allows an authorized attacker to elevate privilege | |
CVE-2026-70103 |
high | 7.8 | 0.0040 | 2026-10-29 | Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to ele | |
CVE-2026-70098 |
high | 8.8 | 0.0058 | 2026-10-29 | Missing authorization in Visual Studio Code allows an unauthorized attacker to execute cod | |
CVE-2026-70095 |
high | 7.5 | 0.0063 | 2026-10-29 | Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute cod | |
CVE-2026-70092 |
high | 7.8 | 0.0047 | 2026-10-29 | Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized a | |
CVE-2026-70093 |
high | 7.8 | 0.0038 | 2026-10-29 | Heap-based buffer overflow in Windows Rich Text Edit Control allows an authorized attacker | |
CVE-2026-70079 |
high | 7.5 | 0.0127 | 2026-10-29 | Improper enforcement of behavioral workflow in Windows DNS allows an unauthorized attacker | |
CVE-2026-70082 |
high | 7.5 | 0.0133 | 2026-10-29 | Uncaught exception in Windows DNS allows an unauthorized attacker to deny service over a n | |
CVE-2026-70049 |
high | 8.0 | 0.0266 | 2026-10-29 | Improper neutralization of special elements used in an sql command ('sql injection') in Mi | |
CVE-2026-70045 |
high | 7.0 | 0.0030 | 2026-10-29 | Use after free in Windows Work Folders allows an authorized attacker to elevate privileges | |
CVE-2026-70033 |
high | 7.5 | 0.0127 | 2026-10-29 | Missing release of memory after effective lifetime in Remote Desktop Gateway Service allow | |
CVE-2026-70038 |
high | 8.1 | 0.0075 | 2026-10-29 | Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a net | |
CVE-2026-70031 |
high | 7.5 | 0.0127 | 2026-10-29 | Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to deny servic | |
CVE-2026-70026 |
high | 7.0 | 0.0030 | 2026-10-29 | Use after free in Windows Secure Kernel Mode allows an authorized attacker to elevate priv | |
CVE-2026-70027 |
high | 7.8 | 0.0038 | 2026-10-29 | Heap-based buffer overflow in Windows Subsystem for Linux allows an authorized attacker to | |
CVE-2026-70021 |
high | 7.0 | 0.0030 | 2026-10-29 | Use after free in Windows Direct Composition allows an authorized attacker to elevate priv | |
CVE-2026-70015 |
high | 7.8 | 0.0038 | 2026-10-29 | Use after free in Windows Local Security Authority Subsystem Service (LSASS) allows an aut | |
CVE-2026-70013 |
high | 8.1 | 0.0066 | 2026-10-29 | Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a net | |
CVE-2026-70014 |
high | 7.5 | 0.0075 | 2026-10-29 | Use after free in Windows Cryptographic Services allows an authorized attacker to execute | |
CVE-2026-70012 |
high | 7.5 | 0.0063 | 2026-10-29 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code ov | |
CVE-2026-70004 |
high | 7.5 | 0.0063 | 2026-10-29 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code ov | |
CVE-2026-69998 |
high | 7.5 | 0.0063 | 2026-10-29 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code ov | |
CVE-2026-69996 |
high | 7.5 | 0.0063 | 2026-10-29 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code ov | |
CVE-2026-69997 |
high | 7.5 | 0.0063 | 2026-10-29 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code ov | |
CVE-2026-69995 |
high | 7.5 | 0.0063 | 2026-10-29 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code ov | |
CVE-2026-69992 |
high | 7.5 | 0.0063 | 2026-10-29 | Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execu | |
CVE-2026-69994 |
high | 7.5 | 0.0063 | 2026-10-29 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code ov | |
CVE-2026-69991 |
high | 7.5 | 0.0063 | 2026-10-29 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code ov | |
CVE-2026-69966 |
high | 7.8 | 0.0034 | 2026-10-29 | Integer overflow or wraparound in Microsoft Streaming Service allows an authorized attacke | |
CVE-2026-69964 |
high | 7.0 | 0.0027 | 2026-10-29 | Use after free in Microsoft Streaming Service allows an authorized attacker to elevate pri | |
CVE-2026-69959 |
high | 7.8 | 0.0038 | 2026-10-29 | Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to execute code | |
CVE-2026-69963 |
high | 7.8 | 0.0035 | 2026-10-29 | Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to | |
CVE-2026-69957 |
high | 7.8 | 0.0038 | 2026-10-29 | Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to | |
CVE-2026-69953 |
high | 7.8 | 0.0038 | 2026-10-29 | Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privil | |
CVE-2026-69950 |
high | 7.8 | 0.0038 | 2026-10-29 | Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privil | |
CVE-2026-69952 |
high | 7.8 | 0.0038 | 2026-10-29 | Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate priv | |
CVE-2026-69949 |
high | 7.8 | 0.0038 | 2026-10-29 | Heap-based buffer overflow in Windows Client for NFS allows an authorized attacker to elev | |
CVE-2026-69943 |
high | 8.8 | 0.0116 | 2026-10-29 | Improper limitation of a pathname to a restricted directory ('path traversal') in Microsof | |
CVE-2026-69945 |
high | 8.8 | 0.0032 | 2026-10-29 | Missing authorization in Windows AppX Deployment Extensions allows an authorized attacker |