CVE Database

55204+ vulnerabilities with CVSS scores, EPSS exploit predictions, and CISA KEV status. Updated daily.

Filter: All CRITICAL HIGH MEDIUM LOW CISA KEV
Sort: Newest CVSS EPSS
CVE-2026-85826
7.0 HIGH

Out-of-bounds write in Windows Fast FAT Driver allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-85825
7.0 HIGH

Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-85824
7.0 HIGH

Use after free in Windows Composite Image File System allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-85823
7.0 HIGH

Use after free in Windows Composite Image File System allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-85822
7.8 HIGH

Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-85820
7.8 HIGH

Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-85817
8.8 HIGH

Reliance on untrusted inputs in a security decision in Windows PowerShell allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-85811
7.5 HIGH

Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over an adjacent network.

Oct 13, 2026
CVE-2026-85810
7.0 HIGH

Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-85808
7.5 HIGH

Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network.

Oct 13, 2026
CVE-2026-85807
7.8 HIGH

Integer overflow or wraparound in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-85804
7.8 HIGH

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-85803
7.0 HIGH

Use after free in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-85802
7.0 HIGH

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-85800
7.8 HIGH

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-85799
8.1 HIGH

Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-85798
7.2 HIGH

Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-85796
7.8 HIGH

Numeric truncation error in Windows Installer allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-85795
7.8 HIGH

Use after free in Windows Text Services Framework allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-85791
7.0 HIGH

Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-85377
7.8 HIGH

Access of resource using incompatible type ('type confusion') in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-85376
7.8 HIGH

Weak authentication in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-85375
7.8 HIGH

Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-85373
7.8 HIGH

Heap-based buffer overflow in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-85372
7.0 HIGH

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-85371
8.1 HIGH

Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-85370
7.0 HIGH

Use after free in WebDAV allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-85369
8.2 HIGH

Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-85368
7.8 HIGH

Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-85367
7.0 HIGH

Use after free in Windows Cash Drawer Protocol Provider allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-85366
7.8 HIGH

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-85365
7.0 HIGH

Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-85364
7.0 HIGH

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-85363
8.8 HIGH

Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to elevate privileges over a network.

Oct 13, 2026
CVE-2026-85362
7.0 HIGH

Release of invalid pointer or reference in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-85361
7.0 HIGH

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-85359
7.8 HIGH

Improper control of generation of code ('code injection') in Windows Performance Monitor allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-85358
7.8 HIGH

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-85357
7.0 HIGH

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Phone Service allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-85356
7.8 HIGH

Out-of-bounds read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-85355
7.0 HIGH

Inclusion of functionality from untrusted control sphere in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-85354
7.0 HIGH

Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-85353
7.5 HIGH

Out-of-bounds read in Windows Print Spooler Components allows an unauthorized attacker to disclose information over a network.

Oct 13, 2026
CVE-2026-85352
7.0 HIGH

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-85343
7.8 HIGH

Improper link resolution before file access ('link following') in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-85342
7.0 HIGH

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-85341
7.8 HIGH

Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-85340
7.8 HIGH

Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-85339
8.8 HIGH

Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine

Oct 13, 2026
CVE-2026-85338
7.8 HIGH

Out-of-bounds read in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.

Oct 13, 2026

Scan your infrastructure for known CVEs

Free website and port scanning — find vulnerabilities before attackers do.

Patch and protect

Block known exploits with a web application firewall while you patch, keep your own devices clean, or test the fix on a fresh server.

Compare VPS prices →

Affiliate links: we may earn a commission, your price stays the same.