CVE Database

55204+ vulnerabilities with CVSS scores, EPSS exploit predictions, and CISA KEV status. Updated daily.

Filter: All CRITICAL HIGH MEDIUM LOW CISA KEV
Sort: Newest CVSS EPSS
CVE-2026-69686
8.8 HIGH

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Sep 8, 2026
CVE-2026-69685
7.8 HIGH

Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-69682
7.0 HIGH

Use after free in Windows Host Guardian Service allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-69681
8.0 HIGH

Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges over a network.

Sep 8, 2026
CVE-2026-69680
8.1 HIGH

Origin validation error in Windows DNS allows an unauthorized attacker to perform spoofing over a network.

Sep 8, 2026
CVE-2026-69678
8.8 HIGH

Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.

Sep 8, 2026
CVE-2026-69676
8.8 HIGH

Authentication bypass by capture-replay in Windows Kerberos allows an authorized attacker to execute code over a network.

Sep 8, 2026
CVE-2026-69671
8.8 HIGH

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Sep 8, 2026
CVE-2026-69669
8.8 HIGH

Heap-based buffer overflow in Windows Kernel allows an unauthorized attacker to execute code over a network.

Sep 8, 2026
CVE-2026-69654
7.0 HIGH

Use after free in Windows Accounts Control allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-69652
7.0 HIGH

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-69649
8.8 HIGH

Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network.

Sep 8, 2026
CVE-2026-69648
7.0 HIGH

Use after free in Windows Notification allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-69645
7.0 HIGH

Use after free in Windows Message Queuing allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-69643
8.0 HIGH

Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges over a network.

Sep 8, 2026
CVE-2026-69638
8.4 HIGH

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.

Sep 8, 2026
CVE-2026-69632
8.8 HIGH

Use after free in Microsoft Office allows an unauthorized attacker to execute code over a network.

Sep 8, 2026
CVE-2026-69631
7.5 HIGH

Integer overflow or wraparound in Windows DNS allows an unauthorized attacker to deny service over a network.

Sep 8, 2026
CVE-2026-69630
7.0 HIGH

Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-69629
8.8 HIGH

Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

Sep 8, 2026
CVE-2026-69628
8.8 HIGH

Heap-based buffer overflow in Windows iSCSI allows an authorized attacker to execute code over a network.

Sep 8, 2026
CVE-2026-69625
8.0 HIGH

Heap-based buffer overflow in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges over a network.

Sep 8, 2026
CVE-2026-69623
8.0 HIGH

Heap-based buffer overflow in Windows HTTP Print Provider allows an authorized attacker to execute code over a network.

Sep 8, 2026
CVE-2026-69621
7.0 HIGH

Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-69620
8.1 HIGH

Stack-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

Sep 8, 2026
CVE-2026-69619
8.0 HIGH

Out-of-bounds read in Windows exFAT File System allows an authorized attacker to elevate privileges over a network.

Sep 8, 2026
CVE-2026-69617
7.0 HIGH

Out-of-bounds read in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-69614
8.8 HIGH

Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

Sep 8, 2026
CVE-2026-69613
7.0 HIGH

Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-69612
7.8 HIGH

Absolute path traversal in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-69611
7.0 HIGH

Use after free in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-69610
7.0 HIGH

Buffer over-read in Windows Win32K allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-69608
7.8 HIGH

Integer overflow or wraparound in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-69607
7.5 HIGH

Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network.

Sep 8, 2026
CVE-2026-69606
7.0 HIGH

Use after free in Windows Shell allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-69605
7.0 HIGH

Use after free in Microsoft Install Service allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-69604
7.8 HIGH

Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-69603
8.8 HIGH

Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.

Sep 8, 2026
CVE-2026-69602
7.1 HIGH

Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges over a network.

Sep 8, 2026
CVE-2026-69601
8.8 HIGH

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.

Sep 8, 2026
CVE-2026-69600
7.0 HIGH

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-69599
7.5 HIGH

Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network.

Sep 8, 2026
CVE-2026-69598
8.8 HIGH

Incorrect calculation of buffer size in Windows iSCSI allows an unauthorized attacker to execute code over a network.

Sep 8, 2026
CVE-2026-69597
7.1 HIGH

Use after free in Windows HTTP.sys allows an authorized attacker to elevate privileges over a network.

Sep 8, 2026
CVE-2026-69594
7.8 HIGH

Heap-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-69593
7.8 HIGH

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-69592
7.8 HIGH

Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-69589
7.8 HIGH

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-69588
7.5 HIGH

Missing release of memory after effective lifetime in Windows TCP/IP allows an unauthorized attacker to deny service over a network.

Sep 8, 2026
CVE-2026-69587
7.5 HIGH

Null pointer dereference in Windows IKE Extension allows an unauthorized attacker to deny service over a network.

Sep 8, 2026

Scan your infrastructure for known CVEs

Free website and port scanning — find vulnerabilities before attackers do.

Patch and protect

Block known exploits with a web application firewall while you patch, keep your own devices clean, or test the fix on a fresh server.

Compare VPS prices →

Affiliate links: we may earn a commission, your price stays the same.