CVE Database

160723+ vulnerabilities with CVSS scores, EPSS exploit predictions, and CISA KEV status. Updated daily.

Filter: All CRITICAL HIGH MEDIUM LOW CISA KEV
Sort: Newest CVSS EPSS
CVE-2026-97836
6.5 MEDIUM

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

Oct 13, 2026
CVE-2026-97835
6.5 MEDIUM

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

Oct 13, 2026
CVE-2026-97834
6.5 MEDIUM

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

Oct 13, 2026
CVE-2026-97833
6.5 MEDIUM

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

Oct 13, 2026
CVE-2026-97832
6.5 MEDIUM

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

Oct 13, 2026
CVE-2026-97831
6.5 MEDIUM

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

Oct 13, 2026
CVE-2026-97830
7.5 HIGH

Double free in Windows Internet Information Services allows an unauthorized attacker to deny service over a network.

Oct 13, 2026
CVE-2026-97829
6.5 MEDIUM

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

Oct 13, 2026
CVE-2026-97828
6.5 MEDIUM

Buffer over-read in DNS Server allows an authorized attacker to disclose information over a network.

Oct 13, 2026
CVE-2026-97827
6.5 MEDIUM

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

Oct 13, 2026
CVE-2026-97826
6.5 MEDIUM

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

Oct 13, 2026
CVE-2026-97825
6.5 MEDIUM

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

Oct 13, 2026
CVE-2026-97824
6.5 MEDIUM

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

Oct 13, 2026
CVE-2026-97823
6.5 MEDIUM

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

Oct 13, 2026
CVE-2026-97822
6.5 MEDIUM

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

Oct 13, 2026
CVE-2026-97821
6.5 MEDIUM

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

Oct 13, 2026
CVE-2026-97820
6.5 MEDIUM

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

Oct 13, 2026
CVE-2026-97819
6.5 MEDIUM

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

Oct 13, 2026
CVE-2026-97817
6.5 MEDIUM

Heap-based buffer overflow in DNS Server allows an authorized attacker to disclose information over a network.

Oct 13, 2026
CVE-2026-97816
9.8 CRITICAL

Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-97815
9.8 CRITICAL

Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-97814
9.8 CRITICAL

Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-97813
6.5 MEDIUM

Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to disclose information over a network.

Oct 13, 2026
CVE-2026-97812
7.0 HIGH

Double free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-97811
7.8 HIGH

Double free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-97810
7.0 HIGH

Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-97809
7.8 HIGH

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-97808
7.0 HIGH

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-97807
7.8 HIGH

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-97806
7.8 HIGH

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-97805
9.8 CRITICAL

Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-97804
7.8 HIGH

Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-97803
7.8 HIGH

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-97801
7.5 HIGH

Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to perform tampering over a network.

Oct 13, 2026
CVE-2026-97800
7.8 HIGH

Incorrect permission assignment for critical resource in Windows Mobile Broadband allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-97799
7.8 HIGH

Improper verification of cryptographic signature in Windows Audio Service allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-97798
7.8 HIGH

Improper neutralization of argument delimiters in a command ('argument injection') in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-97794
7.8 HIGH

Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-97793
7.0 HIGH

Missing authentication for critical function in Windows Setup and Deployment allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-97792
7.8 HIGH

Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-97790
5.5 MEDIUM

Improper link resolution before file access ('link following') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to perform tampering locally.

Oct 13, 2026
CVE-2026-97789
7.5 HIGH

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-97788
7.5 HIGH

Observable discrepancy in Active Directory Federation Services (AD FS) allows an unauthorized attacker to disclose information over a network.

Oct 13, 2026
CVE-2026-97787
7.0 HIGH

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges …

Oct 13, 2026
CVE-2026-97783
8.1 HIGH

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.

Oct 13, 2026
CVE-2026-97782
6.8 MEDIUM

Observable discrepancy in Microsoft Office SharePoint allows an authorized attacker to perform tampering over a network.

Oct 13, 2026
CVE-2026-97781
8.8 HIGH

Improper neutralization of special elements used in a command ('command injection') in Microsoft Office OneNote allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-97780
8.8 HIGH

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-97779
6.5 MEDIUM

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

Oct 13, 2026
CVE-2026-97778
8.8 HIGH

Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Oct 13, 2026

Scan your infrastructure for known CVEs

Free website and port scanning — find vulnerabilities before attackers do.

Patch and protect

Block known exploits with a web application firewall while you patch, keep your own devices clean, or test the fix on a fresh server.

Compare VPS prices →

Affiliate links: we may earn a commission, your price stays the same.