Browse All CVEs
13,178 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-96253 |
high | 7.0 | 0.0028 | 2026-10-29 | Use after free in Windows USB Print Driver allows an authorized attacker to elevate privil | |
CVE-2026-96254 |
high | 7.0 | 0.0028 | 2026-10-29 | Use after free in Windows USB Print Driver allows an authorized attacker to elevate privil | |
CVE-2026-96250 |
high | 7.0 | 0.0028 | 2026-10-29 | Use after free in Windows USB Print Driver allows an authorized attacker to elevate privil | |
CVE-2026-96243 |
high | 7.8 | 0.0033 | 2026-10-29 | Improper link resolution before file access ('link following') in Windows WalletService al | |
CVE-2026-96249 |
high | 7.8 | 0.0035 | 2026-10-29 | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate | |
CVE-2026-96209 |
high | 7.0 | 0.0028 | 2026-10-29 | Out-of-bounds read in Windows Network File System allows an authorized attacker to elevate | |
CVE-2026-96186 |
high | 7.8 | 0.0240 | 2026-10-29 | Deserialization of untrusted data in Microsoft Windows Media Foundation allows an authoriz | |
CVE-2026-96188 |
high | 7.3 | 0.0038 | 2026-10-29 | External control of system or configuration setting in Microsoft PowerToys allows an autho | |
CVE-2026-96118 |
high | 7.8 | 0.0035 | 2026-10-29 | Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate pri | |
CVE-2026-96071 |
high | 7.5 | 0.0063 | 2026-10-29 | Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute cod | |
CVE-2026-95943 |
high | 7.0 | 0.0027 | 2026-10-29 | Double free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker t | |
CVE-2026-96044 |
high | 8.8 | 0.0085 | 2026-10-29 | No cwe for this issue in Microsoft Office SharePoint allows an authorized attacker to elev | |
CVE-2026-94512 |
high | 8.8 | 0.0065 | 2026-10-29 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code ove | |
CVE-2026-88219 |
high | 8.8 | 0.0085 | 2026-10-29 | Untrusted pointer dereference in RPC Runtime allows an unauthorized attacker to execute co | |
CVE-2026-88207 |
high | 7.5 | 0.0059 | 2026-10-29 | Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker | |
CVE-2026-88210 |
high | 7.8 | 0.0044 | 2026-10-29 | Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an una | |
CVE-2026-88206 |
high | 7.5 | 0.0057 | 2026-10-29 | Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized att | |
CVE-2026-88200 |
high | 8.8 | 0.0081 | 2026-10-29 | Privilege context switching error in Microsoft Office SharePoint allows an authorized atta | |
CVE-2026-88185 |
high | 8.1 | 0.0078 | 2026-10-29 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to exe | |
CVE-2026-88186 |
high | 8.8 | 0.0086 | 2026-10-29 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to exe | |
CVE-2026-88164 |
high | 8.8 | 0.0084 | 2026-10-29 | Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elev | |
CVE-2026-88166 |
high | 8.8 | 0.0095 | 2026-10-29 | Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacke | |
CVE-2026-88163 |
high | 8.8 | 0.0095 | 2026-10-29 | Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacke | |
CVE-2026-88144 |
high | 8.8 | 0.0093 | 2026-10-29 | Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute c | |
CVE-2026-88116 |
high | 8.8 | 0.0072 | 2026-10-29 | Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute cod | |
CVE-2026-88112 |
high | 8.8 | 0.0070 | 2026-10-29 | Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute cod | |
CVE-2026-88114 |
high | 8.8 | 0.0070 | 2026-10-29 | Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute cod | |
CVE-2026-88093 |
high | 7.8 | 0.0033 | 2026-10-29 | Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elev | |
CVE-2026-88088 |
high | 7.0 | 0.0024 | 2026-10-29 | Integer overflow or wraparound in SQL Server allows an authorized attacker to elevate priv | |
CVE-2026-88082 |
high | 7.0 | 0.0024 | 2026-10-29 | Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileg | |
CVE-2026-88083 |
high | 7.5 | 0.0050 | 2026-10-29 | Stack-based buffer overflow in SQL Server allows an unauthorized attacker to execute code | |
CVE-2026-88081 |
high | 7.7 | 0.0080 | 2026-10-29 | Out-of-bounds read in SQL Server allows an authorized attacker to disclose information ove | |
CVE-2026-88075 |
high | 8.8 | 0.0083 | 2026-10-29 | Improper neutralization of special elements used in an sql command ('sql injection') in Mi | |
CVE-2026-85919 |
high | 7.0 | 0.0024 | 2026-10-29 | Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileg | |
CVE-2026-85888 |
high | 7.7 | 0.0080 | 2026-10-29 | Out-of-bounds read in SQL Server allows an authorized attacker to disclose information ove | |
CVE-2026-85340 |
high | 7.8 | 0.0036 | 2026-10-29 | Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate p | |
CVE-2026-83947 |
high | 7.7 | 0.0053 | 2026-10-29 | Missing authorization in Azure Event Grid allows an authorized attacker to perform spoofin | |
CVE-2026-70343 |
high | 8.8 | 0.0091 | 2026-10-29 | Heap-based buffer overflow in Microsoft MPEG-2 Video Extension allows an unauthorized atta | |
CVE-2026-70281 |
high | 7.5 | 0.0112 | 2026-10-29 | Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose | |
CVE-2026-70246 |
high | 8.8 | 0.0086 | 2026-10-29 | Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to el | |
CVE-2026-70254 |
high | 8.8 | 0.0089 | 2026-10-29 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute co | |
CVE-2026-70215 |
high | 8.8 | 0.0093 | 2026-10-29 | Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute c | |
CVE-2026-70202 |
high | 7.5 | 0.0057 | 2026-10-29 | Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized att | |
CVE-2026-70023 |
high | 7.8 | 0.0038 | 2026-10-29 | Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges loca | |
CVE-2026-108131 |
high | 7.5 | 0.0086 | 2026-10-29 | No cwe for this issue in Active Directory Federation Services (AD FS) allows an unauthoriz | |
CVE-2026-105729 |
high | 7.1 | 0.0036 | 2026-10-29 | Untrusted pointer dereference in SysInternals allows an authorized attacker to elevate pri | |
CVE-2026-105013 |
high | 7.4 | 0.0095 | 2026-10-29 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized atta | |
CVE-2026-102869 |
high | 8.8 | 0.0084 | 2026-10-29 | Access of resource using incompatible type ('type confusion') in .NET and Visual Studio al | |
CVE-2026-102226 |
high | 8.8 | 0.0104 | 2026-10-29 | Improper limitation of a pathname to a restricted directory ('path traversal') in Dynamics | |
CVE-2026-102217 |
high | 8.8 | 0.0126 | 2026-10-29 | Improper resolution of path equivalence in WebDAV allows an authorized attacker to elevate |