Browse All CVEs
30,169 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-27283 |
high | 7.8 | 0.0016 | 2026-10-29 | InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by a Use After Free vulner | |
CVE-2026-27284 |
high | 7.8 | 0.0016 | 2026-10-29 | InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by an out-of-bounds read v | |
CVE-2026-27285 |
medium | 5.5 | 0.0014 | 2026-10-29 | InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by a Heap-based Buffer Ove | |
CVE-2026-27286 |
medium | 5.5 | 0.0016 | 2026-10-29 | InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by a Heap-based Buffer Ove | |
CVE-2026-27291 |
high | 7.8 | 0.0014 | 2026-10-29 | InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by an out-of-bounds write | |
CVE-2026-34622 |
high | 8.6 | 0.0042 | 2026-10-29 | Acrobat Reader versions 26.001.21411, 24.001.30360, 24.001.30362 and earlier are affected | |
CVE-2026-34626 |
medium | 6.3 | 0.0034 | 2026-10-29 | Acrobat Reader versions 26.001.21411, 24.001.30360, 24.001.30362 and earlier are affected | |
CVE-2026-0207 |
high | 8.5 | 0.0038 | 2026-10-29 | A vulnerability exists in FlashBlade whereby sensitive information may be logged under spe | |
CVE-2026-0209 |
medium | 6.9 | 0.0038 | 2026-10-29 | Under certain administrative conditions, FlashArray Purity may apply snapshot retention po | |
CVE-2026-0390 |
medium | 6.7 | 0.0032 | 2026-10-29 | Reliance on untrusted inputs in a security decision in Windows Boot Loader allows an autho | |
CVE-2026-20806 |
medium | 5.5 | 0.0034 | 2026-10-29 | Access of resource using incompatible type ('type confusion') in Windows COM allows an aut | |
CVE-2026-20928 |
medium | 4.6 | 0.0043 | 2026-10-29 | Improper removal of sensitive information before storage or transfer in Windows Recovery E | |
CVE-2026-20930 |
high | 7.8 | 0.0019 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-20945 |
medium | 5.4 | 0.1908 | 2026-10-29 | Improper neutralization of input during web page generation ('cross-site scripting') in Mi | |
CVE-2026-21331 |
medium | 6.1 | 0.0028 | 2026-10-29 | Adobe Connect versions 2025.3, 12.10 and earlier are affected by a reflected Cross-Site Sc | |
CVE-2026-23653 |
medium | 6.5 | 0.0074 | 2026-10-29 | Improper neutralization of special elements used in a command ('command injection') in Git | |
CVE-2026-23657 |
high | 7.8 | 0.0041 | 2026-10-29 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code lo | |
CVE-2026-23666 |
— | — | 0.0133 | 2026-10-29 | Improper input validation in .NET Framework allows an unauthorized attacker to deny servic | |
CVE-2026-23670 |
medium | 5.7 | 0.0027 | 2026-10-29 | Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allow | |
CVE-2026-24906 |
medium | 5.1 | 0.0025 | 2026-10-29 | October is a Content Management System (CMS) and web platform. Versions prior to 3.7.14 an | |
CVE-2026-24907 |
medium | 5.1 | 0.0020 | 2026-10-29 | October is a Content Management System (CMS) and web platform. Versions prior to 3.7.14 an | |
CVE-2026-25184 |
high | 7.0 | 0.0018 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-26143 |
high | 7.8 | 0.0054 | 2026-10-29 | Improper input validation in Microsoft PowerShell allows an unauthorized attacker to bypas | |
CVE-2026-26149 |
critical | 9.0 | 0.0056 | 2026-10-29 | Improper neutralization of escape, meta, or control sequences in Microsoft Power Apps allo | |
CVE-2026-26151 |
high | 7.1 | 0.0083 | 2026-10-29 | Insufficient ui warning of dangerous operations in Windows Remote Desktop allows an unauth | |
CVE-2026-26152 |
high | 7.0 | 0.0023 | 2026-10-29 | Insecure storage of sensitive information in Windows Cryptographic Services allows an auth | |
CVE-2026-26153 |
high | 7.8 | 0.0029 | 2026-10-29 | Out-of-bounds read in Windows Encrypting File System (EFS) allows an authorized attacker t | |
CVE-2026-26154 |
high | 7.5 | 0.0106 | 2026-10-29 | Improper input validation in Windows Server Update Service allows an unauthorized attacker | |
CVE-2026-26155 |
medium | 6.5 | 0.0089 | 2026-10-29 | Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability | |
CVE-2026-26156 |
high | 7.8 | 0.0041 | 2026-10-29 | Heap-based buffer overflow in Windows Hyper-V allows an unauthorized attacker to execute c | |
CVE-2026-26159 |
high | 7.8 | 0.0026 | 2026-10-29 | Missing authentication for critical function in Windows Remote Desktop Licensing Service a | |
CVE-2026-26160 |
high | 7.8 | 0.0027 | 2026-10-29 | Missing authentication for critical function in Windows Remote Desktop Licensing Service a | |
CVE-2026-26161 |
high | 7.8 | 0.0030 | 2026-10-29 | Untrusted pointer dereference in Windows Sensor Data Service allows an authorized attacker | |
CVE-2026-26162 |
high | 7.8 | 0.0030 | 2026-10-29 | Access of resource using incompatible type ('type confusion') in Windows OLE allows an aut | |
CVE-2026-26163 |
high | 7.8 | 0.0030 | 2026-10-29 | Double free in Windows Kernel allows an authorized attacker to elevate privileges locally. | |
CVE-2026-26165 |
high | 7.0 | 0.0025 | 2026-10-29 | Use after free in Windows Shell allows an authorized attacker to elevate privileges locall | |
CVE-2026-26166 |
high | 7.0 | 0.0024 | 2026-10-29 | Double free in Windows Shell allows an authorized attacker to elevate privileges locally. | |
CVE-2026-26167 |
high | 7.8 | 0.0018 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-26168 |
high | 7.8 | 0.0018 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-26169 |
medium | 6.1 | 0.0231 | 2026-10-29 | Buffer over-read in Windows Kernel Memory allows an authorized attacker to disclose inform | |
CVE-2026-26170 |
high | 7.8 | 0.0023 | 2026-10-29 | Improper input validation in Microsoft PowerShell allows an authorized attacker to elevate | |
CVE-2026-26171 |
— | — | 0.0175 | 2026-10-29 | Uncontrolled resource consumption in .NET allows an unauthorized attacker to deny service | |
CVE-2026-26172 |
high | 7.8 | 0.0015 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-26173 |
high | 7.0 | 0.0016 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-26174 |
high | 7.0 | 0.0019 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-26175 |
medium | 4.6 | 0.0040 | 2026-10-29 | Use of uninitialized resource in Windows Boot Manager allows an unauthorized attacker to b | |
CVE-2026-26176 |
high | 7.8 | 0.0023 | 2026-10-29 | Heap-based buffer overflow in Windows Client Side Caching driver (csc.sys) allows an autho | |
CVE-2026-26177 |
high | 7.0 | 0.0020 | 2026-10-29 | Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attac | |
CVE-2026-26178 |
high | 8.8 | 0.0042 | 2026-10-29 | Integer size truncation in Windows Advanced Rasterization Platform (WARP) allows an unauth | |
CVE-2026-26179 |
high | 7.8 | 0.0044 | 2026-10-29 | Double free in Windows Kernel allows an authorized attacker to elevate privileges locally. |