Browse All CVEs
13,198 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-62823 |
high | 8.8 | 0.0053 | 2026-10-29 | Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execu | |
CVE-2026-62807 |
high | 7.8 | 0.0037 | 2026-10-29 | Improper link resolution before file access ('link following') in Windows DHCP Server allo | |
CVE-2026-62811 |
high | 7.8 | 0.0033 | 2026-10-29 | Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate pr | |
CVE-2026-62803 |
high | 7.8 | 0.0037 | 2026-10-29 | Improper link resolution before file access ('link following') in Windows DHCP Server allo | |
CVE-2026-62790 |
high | 8.8 | 0.0091 | 2026-10-29 | Heap-based buffer overflow in Windows SMB Server allows an authorized attacker to execute | |
CVE-2026-62788 |
high | 7.0 | 0.0026 | 2026-10-29 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges local | |
CVE-2026-62780 |
high | 7.0 | 0.0020 | 2026-10-29 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges local | |
CVE-2026-62781 |
high | 8.1 | 0.0071 | 2026-10-29 | Heap-based buffer overflow in RPC Runtime allows an unauthorized attacker to execute code | |
CVE-2026-62776 |
high | 7.8 | 0.0037 | 2026-10-29 | Improper link resolution before file access ('link following') in Windows DHCP Server allo | |
CVE-2026-62778 |
high | 8.1 | 0.0054 | 2026-10-29 | Use after free in Windows DNS allows an unauthorized attacker to elevate privileges over a | |
CVE-2026-62771 |
high | 7.8 | 0.0033 | 2026-10-29 | Heap-based buffer overflow in Windows Cloud Files Mini Filter Driver allows an authorized | |
CVE-2026-62770 |
high | 7.8 | 0.0033 | 2026-10-29 | Heap-based buffer overflow in Windows Shell allows an authorized attacker to elevate privi | |
CVE-2026-62768 |
high | 7.8 | 0.0033 | 2026-10-29 | Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate | |
CVE-2026-62761 |
high | 7.8 | 0.0037 | 2026-10-29 | Improper link resolution before file access ('link following') in Windows DHCP Server allo | |
CVE-2026-62751 |
high | 7.8 | 0.0033 | 2026-10-29 | Integer overflow or wraparound in Windows Projected File System allows an authorized attac | |
CVE-2026-62749 |
high | 7.0 | 0.0026 | 2026-10-29 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges local | |
CVE-2026-62741 |
high | 7.8 | 0.0033 | 2026-10-29 | Integer underflow (wrap or wraparound) in Windows HTTP.sys allows an authorized attacker t | |
CVE-2026-62734 |
high | 7.0 | 0.0020 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-62736 |
high | 7.8 | 0.0033 | 2026-10-29 | Heap-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate | |
CVE-2026-62733 |
high | 7.8 | 0.0033 | 2026-10-29 | Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges l | |
CVE-2026-62732 |
high | 7.8 | 0.0033 | 2026-10-29 | Heap-based buffer overflow in Windows Telephony Service allows an authorized attacker to e | |
CVE-2026-62728 |
high | 7.0 | 0.0020 | 2026-10-29 | Time-of-check time-of-use (toctou) race condition in Windows Common Log File System Driver | |
CVE-2026-62725 |
high | 7.0 | 0.0026 | 2026-10-29 | Use after free in Windows Telephony Service allows an authorized attacker to elevate privi | |
CVE-2026-62726 |
high | 7.0 | 0.0026 | 2026-10-29 | Use after free in Windows Telephony Service allows an authorized attacker to elevate privi | |
CVE-2026-62721 |
high | 7.8 | 0.0030 | 2026-10-29 | Insufficient granularity of access control in User-Mode Power Service (UMPS) allows an aut | |
CVE-2026-62717 |
high | 7.8 | 0.0033 | 2026-10-29 | Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to ele | |
CVE-2026-62711 |
high | 7.8 | 0.0033 | 2026-10-29 | Use after free in Windows Win32K allows an authorized attacker to elevate privileges local | |
CVE-2026-62710 |
high | 7.8 | 0.0033 | 2026-10-29 | Heap-based buffer overflow in Windows Device Association Service allows an authorized atta | |
CVE-2026-62700 |
high | 7.8 | 0.0033 | 2026-10-29 | Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privil | |
CVE-2026-62701 |
high | 7.8 | 0.0033 | 2026-10-29 | Use after free in Windows Telephony Service allows an authorized attacker to elevate privi | |
CVE-2026-61938 |
high | 7.0 | 0.0026 | 2026-10-29 | Use after free in Windows Installer allows an authorized attacker to elevate privileges lo | |
CVE-2026-62698 |
high | 7.8 | 0.0033 | 2026-10-29 | Numeric truncation error in Microsoft Digest Authentication allows an authorized attacker | |
CVE-2026-61926 |
high | 7.8 | 0.0033 | 2026-10-29 | Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate | |
CVE-2026-61929 |
high | 7.0 | 0.0026 | 2026-10-29 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges local | |
CVE-2026-61365 |
high | 7.8 | 0.0030 | 2026-10-29 | Missing authentication for critical function in Windows Remote Desktop Services allows an | |
CVE-2026-61363 |
high | 7.5 | 0.0068 | 2026-10-29 | Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to exe | |
CVE-2026-61364 |
high | 7.8 | 0.0030 | 2026-10-29 | Missing authentication for critical function in Windows Remote Desktop Services allows an | |
CVE-2026-61358 |
high | 7.8 | 0.0037 | 2026-10-29 | Improper link resolution before file access ('link following') in Windows Accessibility In | |
CVE-2026-61355 |
high | 7.8 | 0.0033 | 2026-10-29 | Heap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to | |
CVE-2026-61357 |
high | 7.8 | 0.0033 | 2026-10-29 | Use after free in Application Information Services allows an authorized attacker to elevat | |
CVE-2026-61349 |
high | 7.8 | 0.0026 | 2026-10-29 | Use after free in Windows Work Folder Service allows an authorized attacker to elevate pri | |
CVE-2026-59126 |
high | 7.0 | 0.0020 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-59122 |
high | 7.0 | 0.0020 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-59125 |
high | 7.0 | 0.0026 | 2026-10-29 | Use after free in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to | |
CVE-2026-59119 |
high | 7.3 | 0.0038 | 2026-10-29 | Incorrect default permissions in Microsoft PowerShell allows an authorized attacker to ele | |
CVE-2026-58651 |
high | 7.8 | 0.0047 | 2026-10-29 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to exe | |
CVE-2026-58641 |
high | 7.8 | 0.0047 | 2026-10-29 | Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileg | |
CVE-2026-56179 |
high | 8.3 | 0.0028 | 2026-10-29 | Origin validation error in Windows Network Address Translation (NAT) allows an unauthorize | |
CVE-2026-56171 |
high | 7.1 | 0.0066 | 2026-10-29 | Exposure of private personal information to an unauthorized actor in Windows RDP allows an | |
CVE-2026-42976 |
high | 7.8 | 0.0030 | 2026-10-29 | Missing authentication for critical function in Windows RPC API allows an authorized attac |