Browse All CVEs
13,196 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-49789 |
high | 7.3 | 0.0036 | 2026-10-29 | Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privi | |
CVE-2026-49784 |
high | 7.0 | 0.0020 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-49787 |
high | 7.5 | 0.0117 | 2026-10-29 | Allocation of resources without limits or throttling in Windows HTTP.sys allows an unautho | |
CVE-2026-49783 |
high | 7.8 | 0.0033 | 2026-10-29 | Improperly implemented security check for standard in Windows Secure Boot allows an author | |
CVE-2026-49183 |
high | 7.0 | 0.0020 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-49184 |
high | 8.4 | 0.0034 | 2026-10-29 | Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code | |
CVE-2026-49181 |
high | 7.5 | 0.0117 | 2026-10-29 | Integer underflow (wrap or wraparound) in Windows DHCP Client allows an unauthorized attac | |
CVE-2026-49178 |
high | 8.8 | 0.0091 | 2026-10-29 | Heap-based buffer overflow in Active Directory Domain Services allows an authorized attack | |
CVE-2026-49175 |
high | 7.8 | 0.0033 | 2026-10-29 | Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privile | |
CVE-2026-49176 |
high | 7.8 | 0.0033 | 2026-10-29 | 2 PoC | Improper privilege management in Windows WalletService allows an authorized attacker to el |
CVE-2026-49171 |
high | 7.5 | 0.0030 | 2026-10-29 | Use after free in Microsoft Windows Speech allows an authorized attacker to elevate privil | |
CVE-2026-49169 |
high | 8.0 | 0.0075 | 2026-10-29 | Use after free in DNS Server allows an authorized attacker to execute code over a network. | |
CVE-2026-49170 |
high | 7.8 | 0.0030 | 2026-10-29 | Insufficient granularity of access control in Windows StateRepository API allows an author | |
CVE-2026-49166 |
high | 7.8 | 0.0033 | 2026-10-29 | Use after free in Microsoft Printer Drivers allows an authorized attacker to elevate privi | |
CVE-2026-49164 |
high | 8.1 | 0.0079 | 2026-10-29 | Heap-based buffer overflow in Active Directory Domain Services allows an unauthorized atta | |
CVE-2026-49165 |
high | 7.1 | 0.0034 | 2026-10-29 | Use of uninitialized resource in Microsoft Windows App Store allows an authorized attacker | |
CVE-2026-48581 |
high | 7.8 | 0.0030 | 2026-10-29 | Insufficient granularity of access control in Microsoft Surface allows an authorized attac | |
CVE-2026-49162 |
high | 7.0 | 0.0026 | 2026-10-29 | Use after free in Microsoft Brokering File System allows an authorized attacker to elevate | |
CVE-2026-48572 |
high | 7.0 | 0.0020 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-48571 |
high | 7.0 | 0.0026 | 2026-10-29 | Use after free in Windows App Installer allows an authorized attacker to elevate privilege | |
CVE-2026-48564 |
high | 8.8 | 0.0091 | 2026-10-29 | Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute | |
CVE-2026-47642 |
high | 7.8 | 0.0047 | 2026-10-29 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code l | |
CVE-2026-47305 |
high | 7.8 | 0.0047 | 2026-10-29 | Protection mechanism failure in Visual Studio allows an unauthorized attacker to execute c | |
CVE-2026-47301 |
high | 8.8 | 0.0078 | 2026-10-29 | 1 PoC | Improper access control in Microsoft Configuration Manager allows an authorized attacker t |
CVE-2026-47296 |
high | 7.5 | 0.0069 | 2026-10-29 | Improper neutralization of special elements used in an sql command ('sql injection') in SQ | |
CVE-2026-47290 |
high | 7.8 | 0.0047 | 2026-10-29 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally | |
CVE-2026-47295 |
high | 8.8 | 0.0099 | 2026-10-29 | Improper neutralization of special elements used in an sql command ('sql injection') in SQ | |
CVE-2026-45646 |
high | 7.5 | 0.0117 | 2026-10-29 | Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorize | |
CVE-2026-44800 |
high | 7.8 | 0.0020 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-42975 |
high | 8.0 | 0.0054 | 2026-10-29 | Heap-based buffer overflow in Windows Bluetooth Port Driver allows an unauthorized attacke | |
CVE-2026-42982 |
high | 7.8 | 0.0033 | 2026-10-29 | Improper validation of consistency within input in Windows Secure Kernel Mode allows an au | |
CVE-2026-42900 |
high | 8.1 | 0.0054 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-40378 |
high | 7.5 | 0.0117 | 2026-10-29 | Memory allocation with excessive size value in Windows Local Security Authority Subsystem | |
CVE-2026-71331 |
high | 8.1 | 0.0071 | 2026-10-29 | Integer overflow or wraparound in Windows Device Health Attestation (DHA) allows an unauth | |
CVE-2026-72984 |
high | 8.8 | 0.0082 | 2026-10-29 | Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium- | |
CVE-2026-70338 |
high | 7.8 | 0.0036 | 2026-10-29 | Improper control of generation of code ('code injection') in Microsoft PowerShell allows a | |
CVE-2026-70130 |
high | 8.4 | 0.0034 | 2026-10-29 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute | |
CVE-2026-69855 |
high | 7.7 | 0.0084 | 2026-10-29 | Server-side request forgery (ssrf) in Microsoft Copilot in Azure allows an authorized atta | |
CVE-2026-69558 |
high | 8.6 | 0.0097 | 2026-10-29 | Authorization bypass through user-controlled key in Microsoft Partner Center allows an una | |
CVE-2026-69543 |
high | 8.5 | 0.0056 | 2026-10-29 | Server-side request forgery (ssrf) in Azure Virtual Machines allows an authorized attacker | |
CVE-2026-69419 |
high | 8.5 | 0.0074 | 2026-10-29 | Integer overflow or wraparound in Azure Data Manager for Energy allows an authorized attac | |
CVE-2026-68817 |
high | 7.8 | 0.0047 | 2026-10-29 | Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to e | |
CVE-2026-68812 |
high | 7.8 | 0.0047 | 2026-10-29 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to ex | |
CVE-2026-68814 |
high | 7.8 | 0.0047 | 2026-10-29 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute co | |
CVE-2026-68804 |
high | 7.8 | 0.0047 | 2026-10-29 | Numeric truncation error in Microsoft Office Excel allows an unauthorized attacker to exec | |
CVE-2026-68805 |
high | 7.8 | 0.0047 | 2026-10-29 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to ex | |
CVE-2026-68803 |
high | 7.8 | 0.0047 | 2026-10-29 | Access of resource using incompatible type ('type confusion') in Microsoft Office Excel al | |
CVE-2026-68801 |
high | 7.8 | 0.0047 | 2026-10-29 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to ex | |
CVE-2026-68798 |
high | 7.8 | 0.0047 | 2026-10-29 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to ex | |
CVE-2026-66807 |
high | 7.8 | 0.0047 | 2026-10-29 | Stack-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute |