CVE Database

55204+ vulnerabilities with CVSS scores, EPSS exploit predictions, and CISA KEV status. Updated daily.

Filter: All CRITICAL HIGH MEDIUM LOW CISA KEV
Sort: Newest CVSS EPSS
CVE-2026-96023
7.8 HIGH

Use after free in Windows Push Notification Core allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-96020
8.8 HIGH

Out-of-bounds write in DNS Server allows an authorized attacker to execute code over a network.

Nov 10, 2026
CVE-2026-96019
7.0 HIGH

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-96016
7.8 HIGH

Heap-based buffer overflow in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-96010
8.8 HIGH

Integer underflow (wrap or wraparound) in HID Parser Library allows an authorized attacker to elevate privileges over a network.

Nov 10, 2026
CVE-2026-96008
7.0 HIGH

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-96007
7.0 HIGH

Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-96005
7.8 HIGH

Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-96004
7.0 HIGH

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-96002
8.8 HIGH

Heap-based buffer overflow in DNS Server allows an authorized attacker to execute code over a network.

Nov 10, 2026
CVE-2026-95999
7.8 HIGH

Out-of-bounds read in Windows USB Hub Driver allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-95997
7.8 HIGH

Use after free in Windows Event Logging Service allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-95996
8.8 HIGH

Integer underflow (wrap or wraparound) in Windows Bluetooth Port Driver allows an authorized attacker to elevate privileges over a network.

Nov 10, 2026
CVE-2026-95991
7.8 HIGH

Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-95989
7.0 HIGH

Use after free in vhdmp.sys allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-95988
7.8 HIGH

Incorrect authorization in Windows Kernel allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-95987
7.0 HIGH

Use after free in Windows User Manager Service allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-95983
7.8 HIGH

Untrusted pointer dereference in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-95979
7.0 HIGH

Use after free in Windows Brokering File System allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-95976
7.0 HIGH

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Diagnostic Policy Service allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-95975
8.8 HIGH

Heap-based buffer overflow in Windows Performance Counters allows an unauthorized attacker to execute code over a network.

Nov 10, 2026
CVE-2026-95974
7.0 HIGH

Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-95973
7.0 HIGH

Untrusted pointer dereference in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-95971
7.0 HIGH

Untrusted pointer dereference in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-95968
7.0 HIGH

Use after free in Windows Smart Card allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-95966
7.0 HIGH

Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-95965
7.8 HIGH

Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-95964
7.5 HIGH

Concurrent execution using shared resource with improper synchronization ('race condition') in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

Nov 10, 2026
CVE-2026-95963
7.8 HIGH

Improper link resolution before file access ('link following') in Data Sharing Service Client allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-95961
7.0 HIGH

Double free in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-95960
8.8 HIGH

Access of resource using incompatible type ('type confusion') in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-95956
8.1 HIGH

Use after free in Windows eSCL Scanner allows an unauthorized attacker to execute code over a network.

Nov 10, 2026
CVE-2026-95953
7.8 HIGH

Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-95951
7.8 HIGH

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-95950
7.0 HIGH

Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-95948
7.8 HIGH

Stack-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-95947
7.8 HIGH

An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files. The vulnerability could allow elevation of privilege if …

Nov 10, 2026
CVE-2026-95942
7.8 HIGH

Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-95938
7.0 HIGH

Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-95935
7.8 HIGH

Integer overflow or wraparound in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-95934
7.8 HIGH

Double free in Windows Diagnostic Policy Service allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-95933
7.8 HIGH

Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-95932
7.8 HIGH

Inclusion of functionality from untrusted control sphere in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-95923
7.0 HIGH

Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-95922
7.0 HIGH

Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-95920
7.8 HIGH

Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-95909
7.8 HIGH

Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-95906
7.0 HIGH

Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-95902
7.8 HIGH

Heap-based buffer overflow in Windows USB Hub Driver allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-95898
7.8 HIGH

Heap-based buffer overflow in Windows iSCSI allows an authorized attacker to elevate privileges locally.

Nov 10, 2026

Scan your infrastructure for known CVEs

Free website and port scanning — find vulnerabilities before attackers do.

Patch and protect

Block known exploits with a web application firewall while you patch, keep your own devices clean, or test the fix on a fresh server.

Compare VPS prices →

Affiliate links: we may earn a commission, your price stays the same.