Browse All CVEs
32,766 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-72996 |
high | 7.8 | — | 2026-10-30 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to e | |
CVE-2026-72993 |
high | 7.8 | — | 2026-10-30 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to e | |
CVE-2026-72994 |
high | 7.8 | — | 2026-10-30 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to e | |
CVE-2026-72991 |
high | 7.8 | — | 2026-10-30 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to e | |
CVE-2026-72992 |
high | 7.8 | — | 2026-10-30 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to e | |
CVE-2026-72989 |
high | 7.5 | — | 2026-10-30 | Use of uninitialized resource in Windows Failover Cluster allows an unauthorized attacker | |
CVE-2026-72990 |
high | 7.8 | — | 2026-10-30 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to e | |
CVE-2026-72988 |
high | 7.8 | — | 2026-10-30 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to e | |
CVE-2026-72985 |
medium | 6.8 | — | 2026-10-30 | Heap-based buffer overflow in Windows Volume Shadow Copy allows an unauthorized attacker t | |
CVE-2026-72987 |
high | 8.1 | — | 2026-10-30 | Use after free in Windows DNS allows an unauthorized attacker to execute code over a netwo | |
CVE-2026-72976 |
medium | 5.0 | — | 2026-10-30 | Out-of-bounds read in Microsoft Office Word allows an authorized attacker to disclose info | |
CVE-2026-72977 |
medium | 6.5 | — | 2026-10-30 | Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to discl | |
CVE-2026-72974 |
medium | 6.5 | — | 2026-10-30 | Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose inf | |
CVE-2026-72975 |
medium | 6.5 | — | 2026-10-30 | Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to discl | |
CVE-2026-72972 |
high | 8.8 | — | 2026-10-30 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to exe | |
CVE-2026-72973 |
high | 8.8 | — | 2026-10-30 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to exe | |
CVE-2026-72966 |
medium | 5.5 | — | 2026-10-30 | Missing authorization in Windows Remote Access Connection Manager allows an authorized att | |
CVE-2026-72967 |
high | 7.8 | — | 2026-10-30 | Heap-based buffer overflow in Windows Network Connection Broker allows an authorized attac | |
CVE-2026-72965 |
high | 7.8 | — | 2026-10-30 | Use after free in Windows WebClient Service allows an authorized attacker to elevate privi | |
CVE-2026-72961 |
high | 8.2 | — | 2026-10-30 | Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges | |
CVE-2026-72964 |
medium | 5.5 | — | 2026-10-30 | Missing authentication for critical function in Windows Internet Connection Sharing (ICS) | |
CVE-2026-72959 |
high | 8.8 | — | 2026-10-30 | Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker | |
CVE-2026-72960 |
high | 8.8 | — | 2026-10-30 | Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to exec | |
CVE-2026-72956 |
medium | 6.5 | — | 2026-10-30 | Untrusted pointer dereference in Microsoft Office PowerPoint allows an unauthorized attack | |
CVE-2026-72957 |
high | 7.8 | — | 2026-10-30 | Heap-based buffer overflow in Windows Deployment Services allows an authorized attacker to | |
CVE-2026-72954 |
high | 7.5 | — | 2026-10-30 | Use after free in Windows Deployment Services allows an authorized attacker to execute cod | |
CVE-2026-72952 |
high | 7.0 | — | 2026-10-30 | Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to execute code | |
CVE-2026-72953 |
high | 7.8 | — | 2026-10-30 | Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate | |
CVE-2026-72942 |
medium | 6.5 | — | 2026-10-30 | Out-of-bounds read in Windows Spaceport.sys allows an unauthorized attacker to disclose in | |
CVE-2026-72950 |
high | 8.8 | — | 2026-10-30 | Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker | |
CVE-2026-72938 |
medium | 6.5 | — | 2026-10-30 | Access of resource using incompatible type ('type confusion') in Microsoft Office PowerPoi | |
CVE-2026-72941 |
high | 7.8 | — | 2026-10-30 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to e | |
CVE-2026-72933 |
high | 8.8 | — | 2026-10-30 | Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorize | |
CVE-2026-72936 |
high | 8.1 | — | 2026-10-30 | Use after free in Windows SMB Client allows an unauthorized attacker to execute code over | |
CVE-2026-72932 |
high | 7.5 | — | 2026-10-30 | Buffer over-read in Windows Message Queuing Queue Manager allows an unauthorized attacker | |
CVE-2026-72928 |
high | 7.5 | — | 2026-10-30 | Use after free in Windows DNS allows an authorized attacker to execute code over a network | |
CVE-2026-72931 |
medium | 4.7 | — | 2026-10-30 | Missing release of resource after effective lifetime in Windows Secure Socket Tunneling Pr | |
CVE-2026-71352 |
high | 8.8 | — | 2026-10-30 | Integer underflow (wrap or wraparound) in Windows Remote Access Connection Manager allows | |
CVE-2026-72927 |
medium | 6.7 | — | 2026-10-30 | Heap-based buffer overflow in Winsock allows an authorized attacker to elevate privileges | |
CVE-2026-71342 |
high | 7.0 | — | 2026-10-30 | Use after free in Windows Remote Access Connection Manager allows an authorized attacker t | |
CVE-2026-71349 |
medium | 6.8 | — | 2026-10-30 | Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to exe | |
CVE-2026-70581 |
high | 7.8 | — | 2026-10-30 | Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker | |
CVE-2026-71328 |
high | 8.8 | — | 2026-10-30 | Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute cod | |
CVE-2026-70578 |
high | 7.0 | — | 2026-10-30 | Heap-based buffer overflow in Windows Credential Guard allows an authorized attacker to el | |
CVE-2026-70579 |
high | 7.5 | — | 2026-10-30 | Out-of-bounds read in Windows Mobile Broadband allows an unauthorized attacker to disclose | |
CVE-2026-70577 |
high | 7.0 | — | 2026-10-30 | Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to | |
CVE-2026-70574 |
high | 7.8 | — | 2026-10-30 | Out-of-bounds read in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacke | |
CVE-2026-70575 |
medium | 5.3 | — | 2026-10-30 | Null pointer dereference in Windows Schannel allows an authorized attacker to deny service | |
CVE-2026-70572 |
high | 7.8 | — | 2026-10-30 | Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker | |
CVE-2026-70573 |
high | 7.0 | — | 2026-10-30 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to e |