Browse All CVEs
31,790 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-26156 |
high | 7.8 | 0.0041 | 2026-10-29 | Heap-based buffer overflow in Windows Hyper-V allows an unauthorized attacker to execute c | |
CVE-2026-26159 |
high | 7.8 | 0.0026 | 2026-10-29 | Missing authentication for critical function in Windows Remote Desktop Licensing Service a | |
CVE-2026-26160 |
high | 7.8 | 0.0027 | 2026-10-29 | Missing authentication for critical function in Windows Remote Desktop Licensing Service a | |
CVE-2026-26161 |
high | 7.8 | 0.0030 | 2026-10-29 | Untrusted pointer dereference in Windows Sensor Data Service allows an authorized attacker | |
CVE-2026-26162 |
high | 7.8 | 0.0030 | 2026-10-29 | Access of resource using incompatible type ('type confusion') in Windows OLE allows an aut | |
CVE-2026-26163 |
high | 7.8 | 0.0030 | 2026-10-29 | Double free in Windows Kernel allows an authorized attacker to elevate privileges locally. | |
CVE-2026-26165 |
high | 7.0 | 0.0025 | 2026-10-29 | Use after free in Windows Shell allows an authorized attacker to elevate privileges locall | |
CVE-2026-26166 |
high | 7.0 | 0.0024 | 2026-10-29 | Double free in Windows Shell allows an authorized attacker to elevate privileges locally. | |
CVE-2026-26167 |
high | 7.8 | 0.0018 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-26168 |
high | 7.8 | 0.0018 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-26169 |
medium | 6.1 | 0.0231 | 2026-10-29 | Buffer over-read in Windows Kernel Memory allows an authorized attacker to disclose inform | |
CVE-2026-26170 |
high | 7.8 | 0.0023 | 2026-10-29 | Improper input validation in Microsoft PowerShell allows an authorized attacker to elevate | |
CVE-2026-26171 |
— | — | 0.0175 | 2026-10-29 | Uncontrolled resource consumption in .NET allows an unauthorized attacker to deny service | |
CVE-2026-26172 |
high | 7.8 | 0.0015 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-26173 |
high | 7.0 | 0.0016 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-26174 |
high | 7.0 | 0.0019 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-26175 |
medium | 4.6 | 0.0040 | 2026-10-29 | Use of uninitialized resource in Windows Boot Manager allows an unauthorized attacker to b | |
CVE-2026-26176 |
high | 7.8 | 0.0023 | 2026-10-29 | Heap-based buffer overflow in Windows Client Side Caching driver (csc.sys) allows an autho | |
CVE-2026-26177 |
high | 7.0 | 0.0020 | 2026-10-29 | Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attac | |
CVE-2026-26178 |
high | 8.8 | 0.0042 | 2026-10-29 | Integer size truncation in Windows Advanced Rasterization Platform (WARP) allows an unauth | |
CVE-2026-26179 |
high | 7.8 | 0.0044 | 2026-10-29 | Double free in Windows Kernel allows an authorized attacker to elevate privileges locally. | |
CVE-2026-26180 |
high | 7.8 | 0.0030 | 2026-10-29 | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate priv | |
CVE-2026-26181 |
high | 7.8 | 0.0023 | 2026-10-29 | Use after free in Microsoft Brokering File System allows an authorized attacker to elevate | |
CVE-2026-26182 |
high | 7.0 | 0.0020 | 2026-10-29 | Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attac | |
CVE-2026-26183 |
high | 7.8 | 0.0026 | 2026-10-29 | Improper access control in Windows RPC API allows an authorized attacker to elevate privil | |
CVE-2026-26184 |
high | 7.8 | 0.0024 | 2026-10-29 | Buffer over-read in Windows Projected File System allows an authorized attacker to elevate | |
CVE-2026-27243 |
critical | 9.3 | 0.0030 | 2026-10-29 | Adobe Connect versions 2025.3, 12.10 and earlier are affected by a reflected Cross-Site Sc | |
CVE-2026-27245 |
critical | 9.3 | 0.0030 | 2026-10-29 | Adobe Connect versions 2025.3, 12.10 and earlier are affected by a reflected Cross-Site Sc | |
CVE-2026-27246 |
critical | 9.3 | 0.0030 | 2026-10-29 | Adobe Connect versions 2025.3, 12.10 and earlier are affected by a DOM-based Cross-Site Sc | |
CVE-2026-27258 |
medium | 5.4 | 0.0018 | 2026-10-29 | Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability | |
CVE-2026-27288 |
medium | 5.4 | 0.0019 | 2026-10-29 | Adobe Experience Manager versions 6.5.24, FP11.7 and earlier are affected by a DOM-based C | |
CVE-2026-27303 |
critical | 9.6 | 0.0061 | 2026-10-29 | Adobe Connect versions 2025.3, 12.10 and earlier are affected by a Deserialization of Untr | |
CVE-2026-27906 |
medium | 4.4 | 0.0039 | 2026-10-29 | Improper input validation in Windows Hello allows an authorized attacker to bypass a secur | |
CVE-2026-27907 |
high | 7.8 | 0.0030 | 2026-10-29 | Integer underflow (wrap or wraparound) in Windows Storage Spaces Controller allows an auth | |
CVE-2026-27908 |
high | 7.0 | 0.0155 | 2026-10-29 | Use after free in Windows TDI Translation Driver (tdx.sys) allows an authorized attacker t | |
CVE-2026-27909 |
high | 7.8 | 0.0177 | 2026-10-29 | Use after free in Microsoft Windows Search Component allows an authorized attacker to elev | |
CVE-2026-27910 |
high | 7.8 | 0.0021 | 2026-10-29 | Improper handling of insufficient permissions or privileges in Windows Installer allows an | |
CVE-2026-27911 |
high | 7.8 | 0.0015 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-27912 |
high | 8.0 | 0.0041 | 2026-10-29 | Improper authorization in Windows Kerberos allows an authorized attacker to elevate privil | |
CVE-2026-27913 |
high | 7.7 | 0.0030 | 2026-10-29 | Improper input validation in Windows BitLocker allows an unauthorized attacker to bypass a | |
CVE-2026-27914 |
high | 7.8 | 0.0243 | 2026-10-29 | Improper access control in Microsoft Management Console allows an authorized attacker to e | |
CVE-2026-27915 |
high | 7.8 | 0.0030 | 2026-10-29 | Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized | |
CVE-2026-27916 |
high | 7.8 | 0.0024 | 2026-10-29 | Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized | |
CVE-2026-27917 |
high | 7.0 | 0.0024 | 2026-10-29 | Use after free in Windows WFP NDIS Lightweight Filter Driver (wfplwfs.sys) allows an autho | |
CVE-2026-27918 |
high | 7.0 | 0.0019 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-27919 |
high | 7.8 | 0.0030 | 2026-10-29 | Untrusted pointer dereference in Windows Universal Plug and Play (UPnP) Device Host allows | |
CVE-2026-27920 |
high | 7.8 | 0.0024 | 2026-10-29 | Untrusted pointer dereference in Windows Universal Plug and Play (UPnP) Device Host allows | |
CVE-2026-27921 |
high | 7.0 | 0.0119 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-27922 |
high | 7.0 | 0.0020 | 2026-10-29 | Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attac | |
CVE-2026-27923 |
high | 7.8 | 0.0023 | 2026-10-29 | Use after free in Desktop Window Manager allows an authorized attacker to elevate privileg |