Browse All CVEs
10,814 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-71347 |
medium | 6.4 | 0.0023 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-81964 |
medium | 5.5 | 0.0034 | 2026-10-29 | Use of hard-coded credentials in Windows Update Orchestrator Service allows an authorized | |
CVE-2026-83500 |
medium | 6.1 | 0.0045 | 2026-10-29 | Url redirection to untrusted site ('open redirect') in Windows BitLocker allows an unautho | |
CVE-2026-83504 |
medium | 4.7 | 0.0027 | 2026-10-29 | Time-of-check time-of-use (toctou) race condition in Windows SmartScreen allows an authori | |
CVE-2026-83507 |
medium | 5.5 | 0.0050 | 2026-10-29 | Improper link resolution before file access ('link following') in Windows Update Orchestra | |
CVE-2026-83565 |
medium | 5.5 | 0.0046 | 2026-10-29 | Buffer over-read in Windows Encrypting File System (EFS) allows an authorized attacker to | |
CVE-2026-83573 |
medium | 6.8 | 0.0050 | 2026-10-29 | Integer overflow or wraparound in Windows Kernel Mode Driver allows an unauthorized attack | |
CVE-2026-83582 |
medium | 4.7 | 0.0035 | 2026-10-29 | Use after free in Windows Graphics Kernel allows an authorized attacker to disclose inform | |
CVE-2026-83636 |
medium | 6.5 | 0.0043 | 2026-10-29 | Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service | |
CVE-2026-83681 |
medium | 5.5 | 0.0034 | 2026-10-29 | Weak authentication in Microsoft PowerToys allows an authorized attacker to perform tamper | |
CVE-2026-83794 |
medium | 5.5 | 0.0044 | 2026-10-29 | Out-of-bounds read in Windows Portable Device MTP Driver allows an authorized attacker to | |
CVE-2026-83798 |
medium | 5.5 | 0.0024 | 2026-10-29 | Improper verification of cryptographic signature in Windows Update Stack allows an authori | |
CVE-2026-83835 |
medium | 5.5 | 0.0089 | 2026-10-29 | Buffer over-read in Windows Common Log File System Driver allows an authorized attacker to | |
CVE-2026-83925 |
medium | 4.7 | 0.0072 | 2026-10-29 | Use of uninitialized resource in Windows Kernel allows an authorized attacker to disclose | |
CVE-2026-83926 |
medium | 4.4 | 0.0039 | 2026-10-29 | Improper certificate validation in Windows Hello allows an authorized attacker to bypass a | |
CVE-2026-85790 |
medium | 5.9 | 0.0080 | 2026-10-29 | Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information o | |
CVE-2026-85909 |
medium | 5.5 | 0.0044 | 2026-10-29 | Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an au | |
CVE-2026-85910 |
medium | 5.5 | 0.0044 | 2026-10-29 | Buffer over-read in Windows StateRepository API allows an authorized attacker to disclose | |
CVE-2026-85935 |
medium | 5.5 | 0.0039 | 2026-10-29 | Buffer over-read in Windows USB Driver allows an authorized attacker to disclose informati | |
CVE-2026-85938 |
medium | 5.5 | 0.0034 | 2026-10-29 | Improper access control in Windows Broadcast DVR User Service allows an authorized attacke | |
CVE-2026-85939 |
medium | 5.3 | 0.0037 | 2026-10-29 | Weak authentication in Windows Kernel allows an authorized attacker to bypass a security f | |
CVE-2026-87698 |
medium | 5.5 | 0.0038 | 2026-10-29 | Out-of-bounds read in Windows Remote Access Service Infrastructure allows an authorized at | |
CVE-2026-87709 |
medium | 5.5 | 0.0031 | 2026-10-29 | Improper access control in Windows Host Guardian Service allows an authorized attacker to | |
CVE-2026-88140 |
medium | 5.5 | 0.0039 | 2026-10-29 | Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclo | |
CVE-2026-88143 |
medium | 6.7 | 0.0024 | 2026-10-29 | Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attac | |
CVE-2026-96229 |
medium | 6.5 | 0.0095 | 2026-10-29 | Permissive list of allowed inputs in .NET allows an unauthorized attacker to disclose info | |
CVE-2026-96234 |
medium | 5.3 | 0.0033 | 2026-10-29 | Origin validation error in .NET allows an unauthorized attacker to disclose information ov | |
CVE-2026-96238 |
medium | 6.5 | 0.0030 | 2026-10-29 | Origin validation error in .NET allows an unauthorized attacker to bypass a security featu | |
CVE-2026-96303 |
medium | 6.5 | 0.0069 | 2026-10-29 | Improperly implemented security check for standard in Microsoft PowerShell allows an unaut | |
CVE-2026-96858 |
medium | 5.5 | 0.0046 | 2026-10-29 | Missing authentication for critical function in Windows Security Account Manager allows an | |
CVE-2026-96859 |
medium | 5.5 | 0.0039 | 2026-10-29 | Out-of-bounds read in Windows Imaging Component allows an authorized attacker to disclose | |
CVE-2026-96860 |
medium | 5.5 | 0.0039 | 2026-10-29 | Out-of-bounds read in Windows USB Print Driver allows an authorized attacker to disclose i | |
CVE-2026-96863 |
medium | 6.8 | 0.0031 | 2026-10-29 | Heap-based buffer overflow in Windows Storage Port Driver allows an unauthorized attacker | |
CVE-2026-96865 |
medium | 5.6 | 0.0035 | 2026-10-29 | Exposure of sensitive system information to an unauthorized control sphere in Windows Secu | |
CVE-2026-96910 |
medium | 5.5 | 0.0044 | 2026-10-29 | Untrusted pointer dereference in Microsoft Windows Search Component allows an authorized a | |
CVE-2026-106628 |
medium | 5.4 | 0.0019 | 2026-10-29 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerabili | |
CVE-2026-106631 |
medium | 5.4 | 0.0036 | 2026-10-29 | Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability | |
CVE-2026-95640 |
medium | 5.5 | 0.0017 | 2026-10-29 | Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that could resul | |
CVE-2026-110259 |
medium | 6.8 | 0.0017 | 2026-10-29 | OW2 ASM 3.0 before 9.11 contains an uncontrolled recursion vulnerability in ClassWriter.re | |
CVE-2026-110270 |
medium | 6.8 | 0.0017 | 2026-10-29 | OW2 ASM 3.0 before 9.11 contains an uncontrolled memory allocation vulnerability in the as | |
CVE-2026-110595 |
medium | 5.3 | 0.0051 | 2026-10-29 | BottleCRM 0.45 through 1.14.5 contains an uncontrolled memory allocation vulnerability in | |
CVE-2026-110605 |
medium | 6.8 | 0.0028 | 2026-10-29 | libschrift through 0.10.2 contains a divide by zero vulnerability that allows attackers to | |
CVE-2026-110610 |
medium | 5.3 | 0.0034 | 2026-10-29 | ruoyi-vue-pro through 2026.09 contains a server-side request forgery vulnerability in the | |
CVE-2026-110620 |
medium | 6.1 | 0.0056 | 2026-10-29 | Formbricks before 4.9.0 contains an authorization bypass vulnerability in server actions l | |
CVE-2026-96596 |
medium | 5.9 | 0.0021 | 2026-10-29 | Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Erlang OTP stdlib | |
CVE-2026-110831 |
medium | 5.3 | 0.0028 | 2026-10-29 | FreeRDP versions 3.13.0 before 3.32.0 contain a resource retention flaw in drive_process_i | |
CVE-2026-110835 |
medium | 6.3 | 0.0026 | 2026-10-29 | FreeRDP 3.0.0 before 3.32.0 allows HTTP header injection in its proxy because a lone LF in | |
CVE-2026-110837 |
medium | 6.1 | 0.0037 | 2026-10-29 | FreeRDP 2.0.0 before 3.32.0, when built with WITH_LAME=ON and WITH_DSP_FFMPEG=OFF, has a h | |
CVE-2026-110860 |
medium | 6.9 | 0.0019 | 2026-10-29 | GitPython from 3.1.62 before 3.2.0 contains a symlink-following flaw in Submodule.move(), | |
CVE-2026-110870 |
medium | 6.9 | 0.0027 | 2026-10-29 | Nodemailer from 3.0.0 before 10.0.13 contains an improper input validation vulnerability i |