CVE Database

55204+ vulnerabilities with CVSS scores, EPSS exploit predictions, and CISA KEV status. Updated daily.

Filter: All CRITICAL HIGH MEDIUM LOW CISA KEV
Sort: Newest CVSS EPSS
CVE-2026-103842
7.8 HIGH

Substance3D - Stager is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of …

Oct 13, 2026
CVE-2026-103841
7.8 HIGH

Substance3D - Stager is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of …

Oct 13, 2026
CVE-2026-103840
7.8 HIGH

Substance3D - Stager is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of …

Oct 13, 2026
CVE-2026-103839
7.8 HIGH

Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation …

Oct 13, 2026
CVE-2026-103838
7.8 HIGH

Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation …

Oct 13, 2026
CVE-2026-103837
7.8 HIGH

Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation …

Oct 13, 2026
CVE-2026-103836
7.8 HIGH

Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation …

Oct 13, 2026
CVE-2026-103835
7.8 HIGH

Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation …

Oct 13, 2026
CVE-2026-103834
7.8 HIGH

Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation …

Oct 13, 2026
CVE-2026-103833
7.8 HIGH

Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation …

Oct 13, 2026
CVE-2026-103832
7.8 HIGH

Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation …

Oct 13, 2026
CVE-2026-103830
7.8 HIGH

Substance3D - Stager is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. …

Oct 13, 2026
CVE-2026-102855
8.8 HIGH

Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-102235
8.8 HIGH

Improper encoding or escaping of output in Visual Studio Code allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-102234
7.4 HIGH

Reliance on untrusted inputs in a security decision in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.

Oct 13, 2026
CVE-2026-97830
7.5 HIGH

Double free in Windows Internet Information Services allows an unauthorized attacker to deny service over a network.

Oct 13, 2026
CVE-2026-97812
7.0 HIGH

Double free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-97811
7.8 HIGH

Double free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-97810
7.0 HIGH

Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-97809
7.8 HIGH

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-97808
7.0 HIGH

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-97807
7.8 HIGH

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-97806
7.8 HIGH

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-97804
7.8 HIGH

Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-97803
7.8 HIGH

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-97801
7.5 HIGH

Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to perform tampering over a network.

Oct 13, 2026
CVE-2026-97800
7.8 HIGH

Incorrect permission assignment for critical resource in Windows Mobile Broadband allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-97799
7.8 HIGH

Improper verification of cryptographic signature in Windows Audio Service allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-97798
7.8 HIGH

Improper neutralization of argument delimiters in a command ('argument injection') in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-97794
7.8 HIGH

Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-97793
7.0 HIGH

Missing authentication for critical function in Windows Setup and Deployment allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-97792
7.8 HIGH

Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-97789
7.5 HIGH

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-97788
7.5 HIGH

Observable discrepancy in Active Directory Federation Services (AD FS) allows an unauthorized attacker to disclose information over a network.

Oct 13, 2026
CVE-2026-97787
7.0 HIGH

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges …

Oct 13, 2026
CVE-2026-97783
8.1 HIGH

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.

Oct 13, 2026
CVE-2026-97781
8.8 HIGH

Improper neutralization of special elements used in a command ('command injection') in Microsoft Office OneNote allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-97780
8.8 HIGH

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-97778
8.8 HIGH

Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-97777
8.8 HIGH

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-97776
8.8 HIGH

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-97775
8.8 HIGH

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-97774
7.0 HIGH

Time-of-check time-of-use (toctou) race condition in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-97773
8.8 HIGH

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-97772
8.8 HIGH

Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-97771
8.8 HIGH

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-97770
8.8 HIGH

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-97769
8.8 HIGH

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-97768
8.8 HIGH

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-97767
8.8 HIGH

Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Oct 13, 2026

Scan your infrastructure for known CVEs

Free website and port scanning — find vulnerabilities before attackers do.

Patch and protect

Block known exploits with a web application firewall while you patch, keep your own devices clean, or test the fix on a fresh server.

Compare VPS prices →

Affiliate links: we may earn a commission, your price stays the same.