CVE Database

55204+ vulnerabilities with CVSS scores, EPSS exploit predictions, and CISA KEV status. Updated daily.

Filter: All CRITICAL HIGH MEDIUM LOW CISA KEV
Sort: Newest CVSS EPSS
CVE-2026-88185
8.1 HIGH

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-88182
7.8 HIGH

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-88181
7.8 HIGH

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-88180
7.8 HIGH

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-88179
7.8 HIGH

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-88177
7.8 HIGH

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-88174
8.1 HIGH

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Deployment Services allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-88173
8.1 HIGH

Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-88171
8.1 HIGH

Double free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-88168
7.8 HIGH

Heap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-88166
8.8 HIGH

Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-88165
8.8 HIGH

Out-of-bounds write in Active Directory Domain Services allows an authorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-88163
8.8 HIGH

Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-88161
7.0 HIGH

Use after free in Windows Local Security Authority (LSA) allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-88160
7.0 HIGH

Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-88159
8.8 HIGH

Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-88157
8.8 HIGH

Heap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-88155
8.8 HIGH

Heap-based buffer overflow in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-88152
7.8 HIGH

Use after free in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-88150
8.8 HIGH

Use of uninitialized resource in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-88149
7.0 HIGH

Double free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-88147
7.8 HIGH

Heap-based buffer overflow in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-88146
7.0 HIGH

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-88145
8.8 HIGH

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-88144
8.8 HIGH

Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-88142
8.8 HIGH

Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-88141
7.0 HIGH

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-88139
7.0 HIGH

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-88136
8.8 HIGH

Improper resolution of path equivalence in WebDAV allows an authorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-88135
7.8 HIGH

Improper access control in WebDAV allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-88134
7.8 HIGH

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-88133
7.8 HIGH

Improper authorization in Windows Portable Device Enumerator Service allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-88128
7.8 HIGH

Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-88127
7.0 HIGH

Use after free in Windows SMB Server allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-88126
7.8 HIGH

Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-88124
7.0 HIGH

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-88121
8.0 HIGH

Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-88120
8.1 HIGH

Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-88119
8.1 HIGH

Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-88118
7.8 HIGH

Integer overflow or wraparound in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-88117
8.1 HIGH

Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-88116
8.8 HIGH

Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-88115
8.8 HIGH

Out-of-bounds read in Windows Server for NFS allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-88114
8.8 HIGH

Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-88113
7.0 HIGH

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-88112
8.8 HIGH

Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-88110
7.0 HIGH

Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-88109
7.8 HIGH

Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-88107
7.0 HIGH

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-88106
7.0 HIGH

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

Oct 13, 2026

Scan your infrastructure for known CVEs

Free website and port scanning — find vulnerabilities before attackers do.

Patch and protect

Block known exploits with a web application firewall while you patch, keep your own devices clean, or test the fix on a fresh server.

Compare VPS prices →

Affiliate links: we may earn a commission, your price stays the same.