Browse All CVEs
10,801 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-70011 |
medium | 5.5 | 0.0046 | 2026-10-29 | Out-of-bounds read in Windows IP Over USB Service allows an authorized attacker to disclos | |
CVE-2026-70055 |
medium | 5.5 | 0.0093 | 2026-10-29 | Exposure of sensitive system information to an unauthorized control sphere in Windows Cryp | |
CVE-2026-70057 |
medium | 5.5 | 0.0032 | 2026-10-29 | Incorrect authorization in Windows Routing and Remote Access Service (RRAS) allows an auth | |
CVE-2026-70063 |
medium | 4.7 | 0.0035 | 2026-10-29 | Out-of-bounds read in Windows Kernel allows an authorized attacker to disclose information | |
CVE-2026-70072 |
medium | 6.5 | 0.0123 | 2026-10-29 | Allocation of resources without limits or throttling in Windows Netlogon allows an authori | |
CVE-2026-70075 |
medium | 4.4 | 0.0031 | 2026-10-29 | Time-of-check time-of-use (toctou) race condition in Windows Virtualization-Based Security | |
CVE-2026-70077 |
medium | 4.7 | 0.0035 | 2026-10-29 | Use after free in Windows Kernel allows an authorized attacker to disclose information loc | |
CVE-2026-70084 |
medium | 5.5 | 0.0050 | 2026-10-29 | Improper access control in Windows Projected File System allows an authorized attacker to | |
CVE-2026-70090 |
medium | 5.5 | 0.0046 | 2026-10-29 | Use of uninitialized resource in Windows Netlogon allows an authorized attacker to disclos | |
CVE-2026-70116 |
medium | 4.2 | 0.0036 | 2026-10-29 | Stack-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized | |
CVE-2026-70122 |
medium | 6.5 | 0.0029 | 2026-10-29 | Time-of-check time-of-use (toctou) race condition in Windows Broadcast DVR User Service al | |
CVE-2026-70128 |
medium | 5.5 | 0.0042 | 2026-10-29 | Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose informa | |
CVE-2026-70135 |
medium | 5.5 | 0.0046 | 2026-10-29 | Out-of-bounds read in Windows Remote POS Driver allows an authorized attacker to disclose | |
CVE-2026-70137 |
medium | 5.5 | 0.0040 | 2026-10-29 | Improper access control in Windows Remote Access Connection Manager allows an authorized a | |
CVE-2026-70141 |
medium | 5.5 | 0.0044 | 2026-10-29 | Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to | |
CVE-2026-70148 |
medium | 6.5 | 0.0040 | 2026-10-29 | Improper authorization in Windows Broadcast DVR User Service allows an authorized attacker | |
CVE-2026-70162 |
medium | 5.9 | 0.0089 | 2026-10-29 | A denial of service vulnerability exists when Microsoft Common Object Runtime Library impr | |
CVE-2026-70165 |
medium | 6.7 | 0.0037 | 2026-10-29 | Improper link resolution before file access ('link following') in .NET allows an authorize | |
CVE-2026-70170 |
medium | 6.5 | 0.0123 | 2026-10-29 | Untrusted pointer dereference in Windows Kernel allows an authorized attacker to deny serv | |
CVE-2026-70173 |
medium | 5.5 | 0.0044 | 2026-10-29 | Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to | |
CVE-2026-70194 |
medium | 6.5 | 0.0049 | 2026-10-29 | Improper certificate validation in .NET Framework allows an unauthorized attacker to bypas | |
CVE-2026-70195 |
medium | 4.7 | 0.0026 | 2026-10-29 | Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attac | |
CVE-2026-70199 |
medium | 5.5 | 0.0093 | 2026-10-29 | Exposure of sensitive system information to an unauthorized control sphere in Windows Kern | |
CVE-2026-70201 |
medium | 5.5 | 0.0045 | 2026-10-29 | Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service lo | |
CVE-2026-70208 |
medium | 5.5 | 0.0044 | 2026-10-29 | Out-of-bounds read in Windows HTTP.sys allows an authorized attacker to disclose informati | |
CVE-2026-70211 |
medium | 5.5 | 0.0046 | 2026-10-29 | Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disc | |
CVE-2026-70216 |
medium | 5.5 | 0.0034 | 2026-10-29 | Insufficient granularity of access control in Windows Mobile Device Management allows an a | |
CVE-2026-70227 |
medium | 5.5 | 0.0046 | 2026-10-29 | Out-of-bounds read in Windows Device Association Service allows an authorized attacker to | |
CVE-2026-70232 |
medium | 5.5 | 0.0093 | 2026-10-29 | Exposure of sensitive system information to an unauthorized control sphere in Windows Kern | |
CVE-2026-70234 |
medium | 5.5 | 0.0042 | 2026-10-29 | Buffer over-read in Desktop Window Manager allows an authorized attacker to disclose infor | |
CVE-2026-70235 |
medium | 5.5 | 0.0032 | 2026-10-29 | Improper authentication in Windows Event Tracing allows an authorized attacker to perform | |
CVE-2026-70248 |
medium | 6.5 | 0.0043 | 2026-10-29 | Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service | |
CVE-2026-70260 |
medium | 5.5 | 0.0093 | 2026-10-29 | Exposure of sensitive system information to an unauthorized control sphere in Microsoft Tr | |
CVE-2026-70261 |
medium | 5.5 | 0.0093 | 2026-10-29 | Exposure of sensitive system information to an unauthorized control sphere in Microsoft Tr | |
CVE-2026-70270 |
medium | 5.5 | 0.0044 | 2026-10-29 | Untrusted pointer dereference in Windows Container Isolation FS Filter Driver allows an au | |
CVE-2026-70277 |
medium | 5.5 | 0.0062 | 2026-10-29 | Out-of-bounds read in Windows Fast FAT Driver allows an unauthorized attacker to disclose | |
CVE-2026-70280 |
medium | 4.4 | 0.0039 | 2026-10-29 | Incorrect authorization in Windows Hello allows an authorized attacker to bypass a securit | |
CVE-2026-71347 |
medium | 6.4 | 0.0023 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-81964 |
medium | 5.5 | 0.0034 | 2026-10-29 | Use of hard-coded credentials in Windows Update Orchestrator Service allows an authorized | |
CVE-2026-83500 |
medium | 6.1 | 0.0045 | 2026-10-29 | Url redirection to untrusted site ('open redirect') in Windows BitLocker allows an unautho | |
CVE-2026-83504 |
medium | 4.7 | 0.0027 | 2026-10-29 | Time-of-check time-of-use (toctou) race condition in Windows SmartScreen allows an authori | |
CVE-2026-83507 |
medium | 5.5 | 0.0050 | 2026-10-29 | Improper link resolution before file access ('link following') in Windows Update Orchestra | |
CVE-2026-83565 |
medium | 5.5 | 0.0046 | 2026-10-29 | Buffer over-read in Windows Encrypting File System (EFS) allows an authorized attacker to | |
CVE-2026-83573 |
medium | 6.8 | 0.0050 | 2026-10-29 | Integer overflow or wraparound in Windows Kernel Mode Driver allows an unauthorized attack | |
CVE-2026-83582 |
medium | 4.7 | 0.0035 | 2026-10-29 | Use after free in Windows Graphics Kernel allows an authorized attacker to disclose inform | |
CVE-2026-83636 |
medium | 6.5 | 0.0043 | 2026-10-29 | Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service | |
CVE-2026-83681 |
medium | 5.5 | 0.0034 | 2026-10-29 | Weak authentication in Microsoft PowerToys allows an authorized attacker to perform tamper | |
CVE-2026-83794 |
medium | 5.5 | 0.0044 | 2026-10-29 | Out-of-bounds read in Windows Portable Device MTP Driver allows an authorized attacker to | |
CVE-2026-83798 |
medium | 5.5 | 0.0024 | 2026-10-29 | Improper verification of cryptographic signature in Windows Update Stack allows an authori | |
CVE-2026-83835 |
medium | 5.5 | 0.0089 | 2026-10-29 | Buffer over-read in Windows Common Log File System Driver allows an authorized attacker to |