CVE Database

55204+ vulnerabilities with CVSS scores, EPSS exploit predictions, and CISA KEV status. Updated daily.

Filter: All CRITICAL HIGH MEDIUM LOW CISA KEV
Sort: Newest CVSS EPSS
CVE-2026-70108
7.8 HIGH

Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-70106
7.8 HIGH

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-70104
7.8 HIGH

Untrusted pointer dereference in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-70103
7.8 HIGH

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-70102
7.8 HIGH

Use after free in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-70095
7.5 HIGH

Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-70093
7.8 HIGH

Heap-based buffer overflow in Windows Rich Text Edit Control allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-70092
7.8 HIGH

Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-70089
8.8 HIGH

Heap-based buffer overflow in Windows GDI allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-70086
7.0 HIGH

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-70082
7.5 HIGH

Uncaught exception in Windows DNS allows an unauthorized attacker to deny service over a network.

Oct 13, 2026
CVE-2026-70079
7.5 HIGH

Improper enforcement of behavioral workflow in Windows DNS allows an unauthorized attacker to deny service over a network.

Oct 13, 2026
CVE-2026-70076
7.0 HIGH

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-70069
8.8 HIGH

Stack-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-70068
8.8 HIGH

Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an unauthorized attacker to elevate privileges over a network.

Oct 13, 2026
CVE-2026-70067
7.0 HIGH

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-70066
7.0 HIGH

Use after free in Windows DHCP Server allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-70064
7.8 HIGH

Integer underflow (wrap or wraparound) in Windows Kerberos allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-70062
8.1 HIGH

Double free in Windows Libarchive allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-70060
7.8 HIGH

Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-70059
7.8 HIGH

Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-70058
7.5 HIGH

Out-of-bounds write in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-70056
7.0 HIGH

Use after free in Windows Update Service allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-70054
7.8 HIGH

Heap-based buffer overflow in Windows NetBIOS allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-70052
7.8 HIGH

Integer overflow or wraparound in Windows PowerShell allows an authorized attacker to execute code locally.

Oct 13, 2026
CVE-2026-70051
7.8 HIGH

Access of resource using incompatible type ('type confusion') in Windows SmartScreen allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-70049
8.0 HIGH

Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over an …

Oct 13, 2026
CVE-2026-70048
7.8 HIGH

Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-70045
7.0 HIGH

Use after free in Windows Work Folders allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-70038
8.1 HIGH

Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-70035
8.8 HIGH

Deserialization of untrusted data in .NET Framework allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-70033
7.5 HIGH

Missing release of memory after effective lifetime in Remote Desktop Gateway Service allows an unauthorized attacker to deny service over a network.

Oct 13, 2026
CVE-2026-70031
7.5 HIGH

Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to deny service over a network.

Oct 13, 2026
CVE-2026-70027
7.8 HIGH

Heap-based buffer overflow in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-70026
7.0 HIGH

Use after free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-70023
7.8 HIGH

Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-70021
7.0 HIGH

Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-70015
7.8 HIGH

Use after free in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-70014
7.5 HIGH

Use after free in Windows Cryptographic Services allows an authorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-70013
8.1 HIGH

Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-70012
7.5 HIGH

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-70010
7.8 HIGH

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-70008
7.8 HIGH

Integer overflow or wraparound in Windows IP Over USB Service allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-70007
8.8 HIGH

Out-of-bounds write in .NET Framework allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-70006
7.5 HIGH

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-70004
7.5 HIGH

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-69998
7.5 HIGH

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-69997
7.5 HIGH

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-69996
7.5 HIGH

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-69995
7.5 HIGH

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

Oct 13, 2026

Scan your infrastructure for known CVEs

Free website and port scanning — find vulnerabilities before attackers do.

Patch and protect

Block known exploits with a web application firewall while you patch, keep your own devices clean, or test the fix on a fresh server.

Compare VPS prices →

Affiliate links: we may earn a commission, your price stays the same.