Browse All CVEs
50,424 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-32197 |
high | 7.8 | 0.0030 | 2026-10-29 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code l | |
CVE-2026-32196 |
medium | 6.1 | 0.0030 | 2026-10-29 | Improper neutralization of input during web page generation ('cross-site scripting') in Wi | |
CVE-2026-32195 |
high | 7.0 | 0.0025 | 2026-10-29 | Stack-based buffer overflow in Windows Kernel allows an authorized attacker to elevate pri | |
CVE-2026-32192 |
high | 7.8 | 0.0200 | 2026-10-29 | Deserialization of untrusted data in Azure Monitor Agent allows an authorized attacker to | |
CVE-2026-32190 |
high | 8.4 | 0.0034 | 2026-10-29 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally | |
CVE-2026-32189 |
high | 7.8 | 0.0039 | 2026-10-29 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code l | |
CVE-2026-32188 |
high | 7.1 | 0.0043 | 2026-10-29 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose i | |
CVE-2026-32184 |
high | 7.8 | 0.0200 | 2026-10-29 | Deserialization of untrusted data in Microsoft High Performance Compute Pack (HPC) allows | |
CVE-2026-32183 |
high | 7.8 | 0.0064 | 2026-10-29 | Improper neutralization of special elements used in a command ('command injection') in Win | |
CVE-2026-32181 |
medium | 5.5 | 0.0043 | 2026-10-29 | Improper privilege management in Microsoft Windows allows an authorized attacker to deny s | |
CVE-2026-32178 |
— | — | 0.0237 | 2026-10-29 | Improper neutralization of special elements in .NET allows an unauthorized attacker to per | |
CVE-2026-32176 |
high | 7.8 | 0.0026 | 2026-10-29 | Improper neutralization of special elements used in an sql command ('sql injection') in SQ | |
CVE-2026-32171 |
high | 8.8 | 0.0045 | 2026-10-29 | Insufficiently protected credentials in Azure Logic Apps allows an authorized attacker to | |
CVE-2026-32168 |
high | 7.8 | 0.0032 | 2026-10-29 | Improper input validation in Azure Monitor Agent allows an authorized attacker to elevate | |
CVE-2026-32167 |
high | 7.8 | 0.0031 | 2026-10-29 | Improper neutralization of special elements used in an sql command ('sql injection') in SQ | |
CVE-2026-32165 |
high | 7.8 | 0.0021 | 2026-10-29 | Use after free in Windows User Interface Core allows an authorized attacker to elevate pri | |
CVE-2026-32164 |
high | 7.8 | 0.0017 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-32163 |
high | 7.8 | 0.0017 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-32162 |
high | 8.4 | 0.0195 | 2026-10-29 | Acceptance of extraneous untrusted data with trusted data in Windows COM allows an unautho | |
CVE-2026-32160 |
high | 7.8 | 0.0026 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-32159 |
high | 7.8 | 0.0021 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-32158 |
high | 7.8 | 0.0021 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-32157 |
high | 8.8 | 0.0081 | 2026-10-29 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code ov | |
CVE-2026-32156 |
high | 7.4 | 0.0030 | 2026-10-29 | Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an unauthorize | |
CVE-2026-32155 |
high | 7.8 | 0.0027 | 2026-10-29 | Use after free in Desktop Window Manager allows an authorized attacker to elevate privileg | |
CVE-2026-32154 |
high | 7.8 | 0.0040 | 2026-10-29 | Use after free in Desktop Window Manager allows an authorized attacker to elevate privileg | |
CVE-2026-32153 |
high | 7.8 | 0.0021 | 2026-10-29 | Use after free in Microsoft Windows Speech allows an authorized attacker to elevate privil | |
CVE-2026-32152 |
high | 7.8 | 0.0048 | 2026-10-29 | Use after free in Desktop Window Manager allows an authorized attacker to elevate privileg | |
CVE-2026-32151 |
medium | 6.5 | 0.0078 | 2026-10-29 | Exposure of sensitive information to an unauthorized actor in Windows Shell allows an auth | |
CVE-2026-32150 |
high | 7.0 | 0.0016 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-32149 |
high | 7.3 | 0.0033 | 2026-10-29 | Improper input validation in Windows Hyper-V allows an authorized attacker to execute code | |
CVE-2026-32093 |
high | 7.0 | 0.0116 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-32091 |
high | 7.0 | 0.0016 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-32090 |
high | 7.0 | 0.0021 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-32089 |
high | 7.8 | 0.0026 | 2026-10-29 | Use after free in Windows Speech Brokered Api allows an authorized attacker to elevate pri | |
CVE-2026-32088 |
medium | 5.7 | 0.0020 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-32087 |
high | 7.0 | 0.0026 | 2026-10-29 | Heap-based buffer overflow in Function Discovery Service (fdwsd.dll) allows an authorized | |
CVE-2026-32086 |
high | 7.0 | 0.0016 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-32085 |
medium | 5.5 | 0.0046 | 2026-10-29 | Exposure of sensitive information to an unauthorized actor in Windows Remote Procedure Cal | |
CVE-2026-32084 |
medium | 5.5 | 0.0037 | 2026-10-29 | Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows | |
CVE-2026-32083 |
high | 7.0 | 0.0021 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-32082 |
high | 7.0 | 0.0021 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-32081 |
medium | 5.5 | 0.0044 | 2026-10-29 | Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows | |
CVE-2026-32080 |
high | 7.0 | 0.0022 | 2026-10-29 | Use after free in Windows WalletService allows an authorized attacker to elevate privilege | |
CVE-2026-32079 |
medium | 5.5 | 0.0035 | 2026-10-29 | Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows | |
CVE-2026-32078 |
high | 7.8 | 0.0027 | 2026-10-29 | Use after free in Windows Projected File System allows an authorized attacker to elevate p | |
CVE-2026-32077 |
high | 7.8 | 0.0033 | 2026-10-29 | Untrusted pointer dereference in Windows Universal Plug and Play (UPnP) Device Host allows | |
CVE-2026-32076 |
high | 7.8 | 0.0027 | 2026-10-29 | Out-of-bounds read in Windows Storage Spaces Controller allows an authorized attacker to e | |
CVE-2026-32075 |
high | 7.0 | 0.0028 | 2026-10-29 | Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized | |
CVE-2026-32074 |
high | 7.8 | 0.0027 | 2026-10-29 | Double free in Windows Projected File System allows an authorized attacker to elevate priv |