Browse All CVEs
33,146 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-27918 |
high | 7.0 | 0.0019 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-27919 |
high | 7.8 | 0.0030 | 2026-10-29 | Untrusted pointer dereference in Windows Universal Plug and Play (UPnP) Device Host allows | |
CVE-2026-27920 |
high | 7.8 | 0.0024 | 2026-10-29 | Untrusted pointer dereference in Windows Universal Plug and Play (UPnP) Device Host allows | |
CVE-2026-27921 |
high | 7.0 | 0.0119 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-27922 |
high | 7.0 | 0.0020 | 2026-10-29 | Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attac | |
CVE-2026-27923 |
high | 7.8 | 0.0023 | 2026-10-29 | Use after free in Desktop Window Manager allows an authorized attacker to elevate privileg | |
CVE-2026-27924 |
high | 7.8 | 0.0029 | 2026-10-29 | Use after free in Desktop Window Manager allows an authorized attacker to elevate privileg | |
CVE-2026-27925 |
medium | 6.5 | 0.0036 | 2026-10-29 | Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an unauthorize | |
CVE-2026-27926 |
high | 7.0 | 0.0018 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-27927 |
high | 7.0 | 0.0019 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-27928 |
high | 8.7 | 0.0041 | 2026-10-29 | Improper input validation in Windows Hello allows an unauthorized attacker to bypass a sec | |
CVE-2026-27929 |
high | 7.0 | 0.0019 | 2026-10-29 | Time-of-check time-of-use (toctou) race condition in Windows LUAFV allows an authorized at | |
CVE-2026-27930 |
medium | 5.5 | 0.0038 | 2026-10-29 | Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information | |
CVE-2026-27931 |
medium | 5.5 | 0.0049 | 2026-10-29 | Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information | |
CVE-2026-32068 |
high | 7.0 | 0.0016 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-32069 |
high | 7.8 | 0.0026 | 2026-10-29 | Double free in Windows Projected File System allows an authorized attacker to elevate priv | |
CVE-2026-32070 |
high | 7.0 | 0.0032 | 2026-10-29 | Use after free in Windows Common Log File System Driver allows an authorized attacker to e | |
CVE-2026-32071 |
high | 7.5 | 0.0106 | 2026-10-29 | Null pointer dereference in Windows Local Security Authority Subsystem Service (LSASS) all | |
CVE-2026-32072 |
medium | 6.2 | 0.0029 | 2026-10-29 | Improper authentication in Windows Active Directory allows an unauthorized attacker to per | |
CVE-2026-32073 |
high | 7.0 | 0.0035 | 2026-10-29 | Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attac | |
CVE-2026-32074 |
high | 7.8 | 0.0026 | 2026-10-29 | Double free in Windows Projected File System allows an authorized attacker to elevate priv | |
CVE-2026-32075 |
high | 7.0 | 0.0027 | 2026-10-29 | Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized | |
CVE-2026-32076 |
high | 7.8 | 0.0026 | 2026-10-29 | Out-of-bounds read in Windows Storage Spaces Controller allows an authorized attacker to e | |
CVE-2026-32077 |
high | 7.8 | 0.0032 | 2026-10-29 | Untrusted pointer dereference in Windows Universal Plug and Play (UPnP) Device Host allows | |
CVE-2026-32078 |
high | 7.8 | 0.0026 | 2026-10-29 | Use after free in Windows Projected File System allows an authorized attacker to elevate p | |
CVE-2026-32079 |
medium | 5.5 | 0.0034 | 2026-10-29 | Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows | |
CVE-2026-32080 |
high | 7.0 | 0.0021 | 2026-10-29 | Use after free in Windows WalletService allows an authorized attacker to elevate privilege | |
CVE-2026-32081 |
medium | 5.5 | 0.0042 | 2026-10-29 | Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows | |
CVE-2026-32082 |
high | 7.0 | 0.0020 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-32083 |
high | 7.0 | 0.0020 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-32084 |
medium | 5.5 | 0.0035 | 2026-10-29 | Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows | |
CVE-2026-32085 |
medium | 5.5 | 0.0044 | 2026-10-29 | Exposure of sensitive information to an unauthorized actor in Windows Remote Procedure Cal | |
CVE-2026-32086 |
high | 7.0 | 0.0016 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-32087 |
high | 7.0 | 0.0025 | 2026-10-29 | Heap-based buffer overflow in Function Discovery Service (fdwsd.dll) allows an authorized | |
CVE-2026-32088 |
medium | 5.7 | 0.0019 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-32089 |
high | 7.8 | 0.0025 | 2026-10-29 | Use after free in Windows Speech Brokered Api allows an authorized attacker to elevate pri | |
CVE-2026-32090 |
high | 7.0 | 0.0021 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-32091 |
high | 7.0 | 0.0016 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-32093 |
high | 7.0 | 0.0112 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-32149 |
high | 7.3 | 0.0032 | 2026-10-29 | Improper input validation in Windows Hyper-V allows an authorized attacker to execute code | |
CVE-2026-32150 |
high | 7.0 | 0.0016 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-32151 |
medium | 6.5 | 0.0075 | 2026-10-29 | Exposure of sensitive information to an unauthorized actor in Windows Shell allows an auth | |
CVE-2026-32152 |
high | 7.8 | 0.0046 | 2026-10-29 | Use after free in Desktop Window Manager allows an authorized attacker to elevate privileg | |
CVE-2026-32153 |
high | 7.8 | 0.0020 | 2026-10-29 | Use after free in Microsoft Windows Speech allows an authorized attacker to elevate privil | |
CVE-2026-32154 |
high | 7.8 | 0.0038 | 2026-10-29 | Use after free in Desktop Window Manager allows an authorized attacker to elevate privileg | |
CVE-2026-32155 |
high | 7.8 | 0.0026 | 2026-10-29 | Use after free in Desktop Window Manager allows an authorized attacker to elevate privileg |