CVE Database

55204+ vulnerabilities with CVSS scores, EPSS exploit predictions, and CISA KEV status. Updated daily.

Filter: All CRITICAL HIGH MEDIUM LOW CISA KEV
Sort: Newest CVSS EPSS
CVE-2026-96937
7.0 HIGH

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-96933
7.8 HIGH

Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-96932
7.0 HIGH

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Embedded Mode Service allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-96931
7.8 HIGH

Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-96929
7.8 HIGH

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-96928
7.8 HIGH

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-96923
7.0 HIGH

Use after free in Windows Workstation Service allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-96920
7.8 HIGH

Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-96919
7.0 HIGH

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-96918
7.8 HIGH

Improper access control in Windows NTFS allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-96917
8.8 HIGH

Heap-based buffer overflow in Windows PCI Bus Driver allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-96916
7.8 HIGH

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-96915
7.8 HIGH

Integer overflow or wraparound in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-96914
8.8 HIGH

Integer overflow or wraparound in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-96913
8.8 HIGH

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-96912
7.8 HIGH

Use after free in Windows Client License Service allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-96911
7.8 HIGH

Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-96868
7.0 HIGH

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-96867
7.8 HIGH

Out-of-bounds read in Windows NTFS allows an authorized attacker to execute code locally.

Oct 13, 2026
CVE-2026-96866
7.5 HIGH

Out-of-bounds read in Network Device Enrollment Service (NDES) allows an unauthorized attacker to deny service over a network.

Oct 13, 2026
CVE-2026-96862
7.8 HIGH

Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-96861
7.5 HIGH

Out-of-bounds read in Network Device Enrollment Service (NDES) allows an unauthorized attacker to deny service over a network.

Oct 13, 2026
CVE-2026-96856
7.8 HIGH

Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-96852
7.0 HIGH

Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-96847
7.8 HIGH

Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-96844
8.0 HIGH

Integer underflow (wrap or wraparound) in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges over an adjacent network.

Oct 13, 2026
CVE-2026-96843
7.8 HIGH

Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-96325
7.5 HIGH

Missing reference to active allocated resource in Windows SMB Server allows an unauthorized attacker to deny service over a network.

Oct 13, 2026
CVE-2026-96324
7.8 HIGH

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-96323
7.0 HIGH

Use after free in Windows Update allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-96322
7.0 HIGH

Use after free in Windows Remote Desktop Protocol allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-96319
7.0 HIGH

Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-96318
7.8 HIGH

Heap-based buffer overflow in Windows Resume allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-96317
7.8 HIGH

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-96313
7.0 HIGH

Missing authentication for critical function in Windows Push Notifications allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-96312
7.8 HIGH

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-96310
7.0 HIGH

Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-96309
7.8 HIGH

Use after free in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-96308
7.8 HIGH

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-96307
7.0 HIGH

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-96306
7.8 HIGH

Out-of-bounds read in Windows Sysmain Service allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-96305
7.0 HIGH

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-96304
7.0 HIGH

Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-96302
7.0 HIGH

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-96301
7.0 HIGH

Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-96254
7.0 HIGH

Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-96253
7.0 HIGH

Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-96251
8.8 HIGH

Reliance on untrusted inputs in a security decision in Microsoft PowerShell allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-96250
7.0 HIGH

Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-96249
7.8 HIGH

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

Oct 13, 2026

Scan your infrastructure for known CVEs

Free website and port scanning — find vulnerabilities before attackers do.

Patch and protect

Block known exploits with a web application firewall while you patch, keep your own devices clean, or test the fix on a fresh server.

Compare VPS prices →

Affiliate links: we may earn a commission, your price stays the same.