CVE Database

55204+ vulnerabilities with CVSS scores, EPSS exploit predictions, and CISA KEV status. Updated daily.

Filter: All CRITICAL HIGH MEDIUM LOW CISA KEV
Sort: Newest CVSS EPSS
CVE-2026-119839
8.8 HIGH

Untrusted search path in Remote Desktop Client allows an unauthorized attacker to elevate privileges over a network.

Nov 10, 2026
CVE-2026-119837
7.5 HIGH

Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-119835
7.0 HIGH

Use after free in Windows Smart Card allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-119834
7.8 HIGH

Heap-based buffer overflow in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-119833
7.0 HIGH

Untrusted pointer dereference in Windows Message Queuing allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-119831
7.0 HIGH

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-119827
7.0 HIGH

Missing authorization in Windows Win32K allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-119826
7.8 HIGH

Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-119824
8.8 HIGH

Missing authentication for critical function in Remote Desktop Client allows an unauthorized attacker to perform tampering over a network.

Nov 10, 2026
CVE-2026-119822
7.0 HIGH

Exposure of sensitive system information to an unauthorized control sphere in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-119821
7.8 HIGH

Improper authorization in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-119818
7.8 HIGH

Incorrect authorization in Windows Text Services Framework allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-119817
7.8 HIGH

Double free in Windows Shell allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-119816
7.8 HIGH

Heap-based buffer overflow in Windows Microsoft Account Sign-in Assistant allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-119405
7.0 HIGH

Use after free in Windows Backup Engine allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-119403
7.0 HIGH

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-119402
7.0 HIGH

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-119401
7.0 HIGH

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-119399
7.0 HIGH

Double free in Windows Installer allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-119398
7.8 HIGH

Time-of-check time-of-use (toctou) race condition in Windows Installer allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-119397
7.0 HIGH

Use after free in Kernel Transaction Manager allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-119393
7.8 HIGH

Stack-based buffer overflow in Windows Credential Manager allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-119392
8.8 HIGH

Heap-based buffer overflow in Windows Storage Spaces Controller allows an unauthorized attacker to elevate privileges over a network.

Nov 10, 2026
CVE-2026-119391
7.8 HIGH

Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-119390
7.8 HIGH

Heap-based buffer overflow in Remote Desktop Client allows an authorized attacker to execute code locally.

Nov 10, 2026
CVE-2026-119389
7.0 HIGH

Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-119388
7.0 HIGH

Use after free in Quality Windows Audio/Video Experience (QWAVE) service allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-119387
7.0 HIGH

Use after free in Quality Windows Audio/Video Experience (QWAVE) service allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-119386
7.0 HIGH

Use after free in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-119382
7.8 HIGH

Heap-based buffer overflow in Windows TPM allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-118750
7.5 HIGH

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.

Nov 10, 2026
CVE-2026-118749
7.5 HIGH

Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to deny service over a network.

Nov 10, 2026
CVE-2026-118748
7.5 HIGH

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.

Nov 10, 2026
CVE-2026-118747
7.5 HIGH

Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.

Nov 10, 2026
CVE-2026-118745
8.8 HIGH

Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.

Nov 10, 2026
CVE-2026-118742
8.6 HIGH

Incorrect permission assignment for critical resource in Azure Front Door (AFD) allows an unauthorized attacker to elevate privileges over a network.

Nov 10, 2026
CVE-2026-118741
8.1 HIGH

Improper authentication in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network.

Nov 10, 2026
CVE-2026-118737
8.1 HIGH

Improper verification of cryptographic signature in Windows Remote Procedure Call Runtime allows an unauthorized attacker to execute code over a network.

Nov 10, 2026
CVE-2026-118735
7.5 HIGH

Weak authentication in Active Directory Domain Services allows an authorized attacker to elevate privileges over a network.

Nov 10, 2026
CVE-2026-118732
8.8 HIGH

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Nov 10, 2026
CVE-2026-118731
8.8 HIGH

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Nov 10, 2026
CVE-2026-118730
8.8 HIGH

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Nov 10, 2026
CVE-2026-118729
8.8 HIGH

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Nov 10, 2026
CVE-2026-118726
8.8 HIGH

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Nov 10, 2026
CVE-2026-118725
8.8 HIGH

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to elevate privileges over a network.

Nov 10, 2026
CVE-2026-118724
8.8 HIGH

Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Nov 10, 2026
CVE-2026-118723
7.8 HIGH

Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Nov 10, 2026
CVE-2026-118722
8.8 HIGH

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Nov 10, 2026
CVE-2026-118721
8.8 HIGH

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Nov 10, 2026
CVE-2026-118720
8.8 HIGH

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Nov 10, 2026

Scan your infrastructure for known CVEs

Free website and port scanning — find vulnerabilities before attackers do.

Patch and protect

Block known exploits with a web application firewall while you patch, keep your own devices clean, or test the fix on a fresh server.

Compare VPS prices →

Affiliate links: we may earn a commission, your price stays the same.