CVE Database

13891+ vulnerabilities with CVSS scores, EPSS exploit predictions, and CISA KEV status. Updated daily.

Filter: All CRITICAL HIGH MEDIUM LOW CISA KEV
Sort: Newest CVSS EPSS
CVE-2026-96320
9.8 CRITICAL

Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-96252
9.1 CRITICAL

Improper verification of cryptographic signature in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.

Oct 13, 2026
CVE-2026-96219
9.8 CRITICAL

Out-of-bounds write in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-96113
9.8 CRITICAL

Heap-based buffer overflow in DNS Server allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-96096
9.8 CRITICAL

Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-92909
9.8 CRITICAL

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker …

Oct 13, 2026
CVE-2026-92464
9.1 CRITICAL

Adobe Commerce is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An …

Oct 13, 2026
CVE-2026-91013
9.3 CRITICAL

Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form …

Oct 13, 2026
CVE-2026-88178
9.8 CRITICAL

Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-88156
9.8 CRITICAL

Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-88102
9.8 CRITICAL

Use after free in Windows Failover Cluster allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-88092
9.4 CRITICAL

Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to perform tampering over a network.

Oct 13, 2026
CVE-2026-85928
9.8 CRITICAL

Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-85818
9.0 CRITICAL

Improper verification of cryptographic signature in Windows Schannel allows an unauthorized attacker to perform spoofing over a network.

Oct 13, 2026
CVE-2026-85814
9.8 CRITICAL

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-85809
9.8 CRITICAL

Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine

Oct 13, 2026
CVE-2026-85806
9.8 CRITICAL

Integer underflow (wrap or wraparound) in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-85792
9.8 CRITICAL

Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine

Oct 13, 2026
CVE-2026-84015
9.8 CRITICAL

Heap-based buffer overflow in Remote Access Point-to-Point Protocol (PPP) EAP-TLS allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-83935
9.8 CRITICAL

Heap-based buffer overflow in Microsoft XML allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-83910
9.8 CRITICAL

Out-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-83869
9.8 CRITICAL

Integer underflow (wrap or wraparound) in DNS Server allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-83862
9.8 CRITICAL

Use after free in Windows Network Load Balancing allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-83782
9.8 CRITICAL

Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-83780
9.8 CRITICAL

Use after free in Windows CCFFilter Driver allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-83770
9.8 CRITICAL

Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-83748
9.8 CRITICAL

Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-83693
9.8 CRITICAL

Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-83578
9.8 CRITICAL

Integer underflow (wrap or wraparound) in Windows PowerShell allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-83519
9.8 CRITICAL

Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-83517
9.8 CRITICAL

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-70300
9.8 CRITICAL

Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-70291
9.8 CRITICAL

Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-70279
9.3 CRITICAL

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.

Oct 13, 2026
CVE-2026-70242
9.8 CRITICAL

Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-70188
9.1 CRITICAL

Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network.

Oct 13, 2026
CVE-2026-70157
9.8 CRITICAL

Heap-based buffer overflow in Windows System Information Console allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-70153
9.8 CRITICAL

Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-70147
9.8 CRITICAL

Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-70096
9.8 CRITICAL

Heap-based buffer overflow in Windows Rich Text Edit Control allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-70024
9.8 CRITICAL

Stack-based buffer overflow in Windows Internet Information Services allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-69886
9.8 CRITICAL

Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-69883
9.8 CRITICAL

Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-69705
9.8 CRITICAL

Out-of-bounds write in Windows iSCSI allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-69639
9.8 CRITICAL

Heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-69634
9.8 CRITICAL

Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-110130
10.0 CRITICAL

Dockhand before 1.0.45 contains an authentication bypass in which the global auth hook skips authentication for any path ending in a static-asset extension such as …

Oct 13, 2026
CVE-2026-105016
9.8 CRITICAL

Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-105010
9.8 CRITICAL

Use after free in Microsoft Windows Search Component allows an unauthorized attacker to elevate privileges over a network.

Oct 13, 2026
CVE-2026-105008
9.0 CRITICAL

No cwe for this issue in Windows Schannel allows an unauthorized attacker to perform spoofing over a network.

Oct 13, 2026

Scan your infrastructure for known CVEs

Free website and port scanning — find vulnerabilities before attackers do.

Patch and protect

Block known exploits with a web application firewall while you patch, keep your own devices clean, or test the fix on a fresh server.

Compare VPS prices →

Affiliate links: we may earn a commission, your price stays the same.