Browse All CVEs
13,189 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-70246 |
high | 8.8 | 0.0086 | 2026-10-29 | Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to el | |
CVE-2026-70254 |
high | 8.8 | 0.0089 | 2026-10-29 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute co | |
CVE-2026-70215 |
high | 8.8 | 0.0093 | 2026-10-29 | Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute c | |
CVE-2026-70202 |
high | 7.5 | 0.0057 | 2026-10-29 | Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized att | |
CVE-2026-70023 |
high | 7.8 | 0.0038 | 2026-10-29 | Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges loca | |
CVE-2026-108131 |
high | 7.5 | 0.0086 | 2026-10-29 | No cwe for this issue in Active Directory Federation Services (AD FS) allows an unauthoriz | |
CVE-2026-105729 |
high | 7.1 | 0.0036 | 2026-10-29 | Untrusted pointer dereference in SysInternals allows an authorized attacker to elevate pri | |
CVE-2026-105013 |
high | 7.4 | 0.0095 | 2026-10-29 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized atta | |
CVE-2026-102869 |
high | 8.8 | 0.0084 | 2026-10-29 | Access of resource using incompatible type ('type confusion') in .NET and Visual Studio al | |
CVE-2026-102226 |
high | 8.8 | 0.0104 | 2026-10-29 | Improper limitation of a pathname to a restricted directory ('path traversal') in Dynamics | |
CVE-2026-102217 |
high | 8.8 | 0.0126 | 2026-10-29 | Improper resolution of path equivalence in WebDAV allows an authorized attacker to elevate | |
CVE-2026-102216 |
high | 7.8 | 0.0037 | 2026-10-29 | Access of resource using incompatible type ('type confusion') in Windows StateRepository A | |
CVE-2026-102214 |
high | 8.8 | 0.0038 | 2026-10-29 | Use after free in Windows Hyper-V allows an authorized attacker to execute code locally. | |
CVE-2026-102215 |
high | 7.8 | 0.0037 | 2026-10-29 | Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allo | |
CVE-2026-102211 |
high | 7.0 | 0.0023 | 2026-10-29 | Use after free in Windows Virtualization-Based Security (VBS) Enclave allows an authorized | |
CVE-2026-102208 |
high | 7.0 | 0.0029 | 2026-10-29 | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate | |
CVE-2026-102209 |
high | 7.0 | 0.0028 | 2026-10-29 | Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker t | |
CVE-2026-102207 |
high | 7.0 | 0.0022 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-102205 |
high | 7.8 | 0.0037 | 2026-10-29 | Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allo | |
CVE-2026-102203 |
high | 8.8 | 0.0085 | 2026-10-29 | Access of resource using incompatible type ('type confusion') in RPC Runtime allows an una | |
CVE-2026-102204 |
high | 7.8 | 0.0040 | 2026-10-29 | Improper link resolution before file access ('link following') in Windows Subsystem for Li | |
CVE-2026-102202 |
high | 7.8 | 0.0041 | 2026-10-29 | Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allo | |
CVE-2026-102201 |
high | 7.8 | 0.0037 | 2026-10-29 | Use after free in Microsoft Windows Media Foundation allows an authorized attacker to elev | |
CVE-2026-102197 |
high | 7.0 | 0.0029 | 2026-10-29 | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elev | |
CVE-2026-102195 |
high | 7.0 | 0.0029 | 2026-10-29 | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elev | |
CVE-2026-102196 |
high | 7.8 | 0.0037 | 2026-10-29 | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elev | |
CVE-2026-102194 |
high | 7.0 | 0.0029 | 2026-10-29 | Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privile | |
CVE-2026-102192 |
high | 7.5 | 0.0127 | 2026-10-29 | Integer underflow (wrap or wraparound) in Windows Failover Cluster allows an unauthorized | |
CVE-2026-102193 |
high | 7.0 | 0.0029 | 2026-10-29 | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elev | |
CVE-2026-102189 |
high | 7.0 | 0.0029 | 2026-10-29 | Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate pri | |
CVE-2026-102191 |
high | 7.0 | 0.0029 | 2026-10-29 | Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate pri | |
CVE-2026-100225 |
high | 7.0 | 0.0029 | 2026-10-29 | Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate pri | |
CVE-2026-100220 |
high | 8.8 | 0.0093 | 2026-10-29 | Heap-based buffer overflow in Windows Media Video Decoder allows an unauthorized attacker | |
CVE-2026-100218 |
high | 8.1 | 0.0082 | 2026-10-29 | Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execut | |
CVE-2026-100216 |
high | 7.0 | 0.0029 | 2026-10-29 | Stack-based buffer overflow in Windows Storage allows an authorized attacker to elevate pr | |
CVE-2026-100217 |
high | 7.8 | 0.0033 | 2026-10-29 | Improper privilege management in Windows Group Policy allows an authorized attacker to ele | |
CVE-2026-100215 |
high | 7.8 | 0.0055 | 2026-10-29 | Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker | |
CVE-2026-100212 |
high | 8.8 | 0.0091 | 2026-10-29 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code o | |
CVE-2026-100214 |
high | 8.8 | 0.0207 | 2026-10-29 | Deserialization of untrusted data in Dynamics Business Central allows an authorized attack | |
CVE-2026-100210 |
high | 8.8 | 0.0093 | 2026-10-29 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to ex | |
CVE-2026-100211 |
high | 8.8 | 0.0093 | 2026-10-29 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code o | |
CVE-2026-100207 |
high | 7.3 | 0.0044 | 2026-10-29 | Improper neutralization of special elements used in an os command ('os command injection') | |
CVE-2026-100209 |
high | 8.8 | 0.0095 | 2026-10-29 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code o | |
CVE-2026-100205 |
high | 7.1 | 0.0041 | 2026-10-29 | Untrusted pointer dereference in SysInternals allows an authorized attacker to elevate pri | |
CVE-2026-100203 |
high | 7.0 | 0.0031 | 2026-10-29 | Heap-based buffer overflow in Windows Update Service allows an authorized attacker to elev | |
CVE-2026-100200 |
high | 7.0 | 0.0031 | 2026-10-29 | Use after free in Windows Update Service allows an authorized attacker to elevate privileg | |
CVE-2026-100201 |
high | 7.0 | 0.0031 | 2026-10-29 | Heap-based buffer overflow in Windows Client License Service allows an authorized attacker | |
CVE-2026-111381 |
high | 7.0 | 0.0018 | 2026-10-29 | FreeRDP before 3.32.0 contains a heap buffer overflow vulnerability in persistent_cache_re | |
CVE-2026-72970 |
high | 8.3 | 0.0073 | 2026-10-29 | Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attac | |
CVE-2026-70355 |
high | 7.3 | 0.0078 | 2026-10-29 | Improper neutralization of input during web page generation ('cross-site scripting') in Mi |