Browse All CVEs
13,193 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-61934 |
high | 7.8 | 0.0033 | 2026-10-29 | Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate priv | |
CVE-2026-61930 |
high | 7.8 | 0.0033 | 2026-10-29 | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate priv | |
CVE-2026-61932 |
high | 7.8 | 0.0033 | 2026-10-29 | Access of resource using incompatible type ('type confusion') in Windows DWM Core Library | |
CVE-2026-61925 |
high | 7.8 | 0.0030 | 2026-10-29 | Incorrect authorization in Windows Installer allows an authorized attacker to elevate priv | |
CVE-2026-61927 |
high | 7.0 | 0.0020 | 2026-10-29 | Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate priv | |
CVE-2026-61923 |
high | 7.8 | 0.0033 | 2026-10-29 | Heap-based buffer overflow in Windows Display Enhancement Service allows an authorized att | |
CVE-2026-61366 |
high | 7.0 | 0.0026 | 2026-10-29 | Double free in Windows Network Connection Broker allows an authorized attacker to elevate | |
CVE-2026-61367 |
high | 7.8 | 0.0030 | 2026-10-29 | Missing authentication for critical function in Windows Remote Desktop Services allows an | |
CVE-2026-61356 |
high | 7.8 | 0.0030 | 2026-10-29 | Missing authentication for critical function in Windows Remote Desktop Services allows an | |
CVE-2026-61361 |
high | 7.0 | 0.0026 | 2026-10-29 | Use after free in Windows DHCP Client allows an authorized attacker to execute code locall | |
CVE-2026-61353 |
high | 7.8 | 0.0033 | 2026-10-29 | Heap-based buffer overflow in Windows Telephony Service allows an authorized attacker to e | |
CVE-2026-61352 |
high | 7.5 | 0.0047 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-61348 |
high | 7.0 | 0.0026 | 2026-10-29 | Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attac | |
CVE-2026-59134 |
high | 7.5 | 0.0068 | 2026-10-29 | Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to exe | |
CVE-2026-59132 |
high | 7.5 | 0.0117 | 2026-10-29 | Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service | |
CVE-2026-58640 |
high | 7.3 | 0.0036 | 2026-10-29 | Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code l | |
CVE-2026-58637 |
high | 7.0 | 0.0026 | 2026-10-29 | Use after free in Windows Client-Side Caching (CSC) Service allows an authorized attacker | |
CVE-2026-58635 |
high | 7.8 | 0.0032 | 2026-10-29 | 1 PoC | Improper neutralization of special elements used in a command ('command injection') in Win |
CVE-2026-58632 |
high | 7.8 | 0.0033 | 2026-10-29 | Use after free in Windows Win32K allows an authorized attacker to elevate privileges local | |
CVE-2026-58628 |
high | 7.8 | 0.0020 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-58629 |
high | 7.0 | 0.0026 | 2026-10-29 | Use after free in Windows DirectX allows an authorized attacker to elevate privileges loca | |
CVE-2026-58626 |
high | 8.8 | 0.0091 | 2026-10-29 | Use after free in Windows Remote Desktop Services allows an authorized attacker to execute | |
CVE-2026-58627 |
high | 7.5 | 0.0117 | 2026-10-29 | Uncontrolled resource consumption in Windows DHCP Server allows an unauthorized attacker t | |
CVE-2026-58618 |
high | 7.8 | 0.0047 | 2026-10-29 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to ex | |
CVE-2026-58619 |
high | 7.0 | 0.0026 | 2026-10-29 | Use after free in Windows Sensor Data Service allows an authorized attacker to elevate pri | |
CVE-2026-58613 |
high | 7.8 | 0.0038 | 2026-10-29 | Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to | |
CVE-2026-58610 |
high | 7.8 | 0.0047 | 2026-10-29 | Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized at | |
CVE-2026-58612 |
high | 7.4 | 0.0087 | 2026-10-29 | Server-side request forgery (ssrf) in Microsoft PowerShell Core allows an unauthorized att | |
CVE-2026-58609 |
high | 7.8 | 0.0047 | 2026-10-29 | Out-of-bounds read in Microsoft Graphics Component allows an unauthorized attacker to exec | |
CVE-2026-58602 |
high | 7.8 | 0.0033 | 2026-10-29 | Use after free in Windows Kernel Mode Driver allows an authorized attacker to elevate priv | |
CVE-2026-58608 |
high | 8.8 | 0.0057 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-58598 |
high | 7.0 | 0.0020 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-58601 |
high | 7.8 | 0.0033 | 2026-10-29 | Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized | |
CVE-2026-58594 |
high | 8.8 | 0.0082 | 2026-10-29 | Integer overflow or wraparound in Windows RDP allows an unauthorized attacker to execute c | |
CVE-2026-58544 |
high | 7.0 | 0.0026 | 2026-10-29 | Use after free in Windows Management Services allows an authorized attacker to elevate pri | |
CVE-2026-58542 |
high | 7.8 | 0.0036 | 2026-10-29 | Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute cod | |
CVE-2026-58541 |
high | 7.8 | 0.0033 | 2026-10-29 | Access of resource using incompatible type ('type confusion') in Windows DWM allows an aut | |
CVE-2026-58540 |
high | 7.8 | 0.0030 | 2026-10-29 | Improper authorization in Windows Installer allows an authorized attacker to elevate privi | |
CVE-2026-58537 |
high | 7.8 | 0.0033 | 2026-10-29 | Use after free in Microsoft NAT Helper Components (ipnathlp.dll) allows an authorized atta | |
CVE-2026-58538 |
high | 7.8 | 0.0033 | 2026-10-29 | Heap-based buffer overflow in Windows Bluetooth Service allows an authorized attacker to e | |
CVE-2026-58536 |
high | 7.8 | 0.0033 | 2026-10-29 | Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to | |
CVE-2026-58534 |
high | 8.8 | 0.0033 | 2026-10-29 | Heap-based buffer overflow in Microsoft Input Method Editor (IME) allows an authorized att | |
CVE-2026-58532 |
high | 7.8 | 0.0033 | 2026-10-29 | Integer overflow or wraparound in Windows Kernel allows an authorized attacker to elevate | |
CVE-2026-58530 |
high | 7.8 | 0.0036 | 2026-10-29 | Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized | |
CVE-2026-58531 |
high | 7.5 | 0.0051 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-58526 |
high | 7.0 | 0.0021 | 2026-10-29 | Use after free in Windows Storage allows an authorized attacker to elevate privileges loca | |
CVE-2026-58527 |
high | 7.8 | 0.0021 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-58277 |
high | 8.8 | 0.0094 | 2026-10-29 | Improper authorization in Microsoft Office SharePoint allows an authorized attacker to ele | |
CVE-2026-57096 |
high | 7.8 | 0.0033 | 2026-10-29 | Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an a | |
CVE-2026-57093 |
high | 7.0 | 0.0028 | 2026-10-29 | Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attac |