CVE Database

55204+ vulnerabilities with CVSS scores, EPSS exploit predictions, and CISA KEV status. Updated daily.

Filter: All CRITICAL HIGH MEDIUM LOW CISA KEV
Sort: Newest CVSS EPSS
CVE-2026-95896
7.8 HIGH

Heap-based buffer overflow in Windows Microsoft DirectMusic allows an authorized attacker to execute code locally.

Nov 10, 2026
CVE-2026-95895
7.8 HIGH

Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-95894
7.8 HIGH

Heap-based buffer overflow in Windows Task Scheduler allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-95891
7.8 HIGH

Heap-based buffer overflow in Windows Microsoft DirectMusic allows an authorized attacker to execute code locally.

Nov 10, 2026
CVE-2026-95888
7.0 HIGH

Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-95885
8.1 HIGH

Use after free in Windows Client for NFS allows an unauthorized attacker to elevate privileges over a network.

Nov 10, 2026
CVE-2026-95881
7.8 HIGH

Heap-based buffer overflow in Windows Push Notifications allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-95879
7.8 HIGH

Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-95877
7.8 HIGH

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-95876
7.0 HIGH

Use after free in Windows Local Session Manager (LSM) allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-95874
7.8 HIGH

Heap-based buffer overflow in Xbox allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-95872
7.8 HIGH

Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-95871
7.0 HIGH

Heap-based buffer overflow in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-94531
7.8 HIGH

Stack-based buffer overflow in Windows COM allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-94529
7.0 HIGH

Heap-based buffer overflow in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-94527
7.8 HIGH

Heap-based buffer overflow in Windows GDI allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-94525
7.0 HIGH

An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files. The vulnerability could allow elevation of privilege if …

Nov 10, 2026
CVE-2026-94522
7.0 HIGH

Use after free in Kernel Transaction Manager allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-94519
7.0 HIGH

Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-94515
7.8 HIGH

Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-94514
7.0 HIGH

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-94513
8.0 HIGH

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.

Nov 10, 2026
CVE-2026-94511
8.8 HIGH

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

Nov 10, 2026
CVE-2026-94507
7.8 HIGH

Heap-based buffer overflow in Windows DirectX allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-88249
8.8 HIGH

Use after free in Windows Client for NFS allows an unauthorized attacker to execute code over a network.

Nov 10, 2026
CVE-2026-88245
7.8 HIGH

Missing authentication for critical function in Windows Brokering File System allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-88244
7.5 HIGH

Use after free in Windows Link Layer Topology Discovery Protocol allows an unauthorized attacker to execute code over an adjacent network.

Nov 10, 2026
CVE-2026-88242
7.0 HIGH

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-88241
7.8 HIGH

Heap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-88240
8.0 HIGH

Heap-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges over an adjacent network.

Nov 10, 2026
CVE-2026-88239
7.8 HIGH

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-88238
7.8 HIGH

Heap-based buffer overflow in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-88237
7.0 HIGH

Use after free in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-88236
7.5 HIGH

Null pointer dereference in Microsoft QUIC allows an unauthorized attacker to deny service over a network.

Nov 10, 2026
CVE-2026-88235
7.8 HIGH

Unintended proxy or intermediary ('confused deputy') in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-88233
7.8 HIGH

Improper authorization in Windows Task Scheduler allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-88232
7.8 HIGH

Use after free in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-88230
7.8 HIGH

Heap-based buffer overflow in Windows LUAFV allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-88229
8.8 HIGH

Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network.

Nov 10, 2026
CVE-2026-88228
7.0 HIGH

Heap-based buffer overflow in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-88227
7.8 HIGH

Heap-based buffer overflow in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-88224
7.0 HIGH

Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-88222
8.8 HIGH

Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network.

Nov 10, 2026
CVE-2026-88221
7.0 HIGH

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-88216
7.5 HIGH

Time-of-check time-of-use (toctou) race condition in Windows DHCP Server allows an authorized attacker to execute code over a network.

Nov 10, 2026
CVE-2026-88213
7.8 HIGH

Numeric truncation error in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-88212
7.5 HIGH

Use after free in Windows Network Address Translation (NAT) allows an unauthorized attacker to execute code over an adjacent network.

Nov 10, 2026
CVE-2026-88187
8.0 HIGH

Heap-based buffer overflow in Windows Bluetooth A2DP driver allows an authorized attacker to elevate privileges over an adjacent network.

Nov 10, 2026
CVE-2026-88176
8.8 HIGH

Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

Nov 10, 2026
CVE-2026-88111
7.5 HIGH

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

Nov 10, 2026

Scan your infrastructure for known CVEs

Free website and port scanning — find vulnerabilities before attackers do.

Patch and protect

Block known exploits with a web application firewall while you patch, keep your own devices clean, or test the fix on a fresh server.

Compare VPS prices →

Affiliate links: we may earn a commission, your price stays the same.