CVE Database

160723+ vulnerabilities with CVSS scores, EPSS exploit predictions, and CISA KEV status. Updated daily.

Filter: All CRITICAL HIGH MEDIUM LOW CISA KEV
Sort: Newest CVSS EPSS
CVE-2026-95996
8.8 HIGH

Integer underflow (wrap or wraparound) in Windows Bluetooth Port Driver allows an authorized attacker to elevate privileges over a network.

Nov 10, 2026
CVE-2026-95991
7.8 HIGH

Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-95989
7.0 HIGH

Use after free in vhdmp.sys allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-95988
7.8 HIGH

Incorrect authorization in Windows Kernel allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-95987
7.0 HIGH

Use after free in Windows User Manager Service allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-95983
7.8 HIGH

Untrusted pointer dereference in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-95979
7.0 HIGH

Use after free in Windows Brokering File System allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-95977
5.5 MEDIUM

Out-of-bounds read in Windows Event Viewer allows an authorized attacker to disclose information locally.

Nov 10, 2026
CVE-2026-95976
7.0 HIGH

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Diagnostic Policy Service allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-95975
8.8 HIGH

Heap-based buffer overflow in Windows Performance Counters allows an unauthorized attacker to execute code over a network.

Nov 10, 2026
CVE-2026-95974
7.0 HIGH

Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-95973
7.0 HIGH

Untrusted pointer dereference in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-95971
7.0 HIGH

Untrusted pointer dereference in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-95968
7.0 HIGH

Use after free in Windows Smart Card allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-95966
7.0 HIGH

Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-95965
7.8 HIGH

Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-95964
7.5 HIGH

Concurrent execution using shared resource with improper synchronization ('race condition') in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

Nov 10, 2026
CVE-2026-95963
7.8 HIGH

Improper link resolution before file access ('link following') in Data Sharing Service Client allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-95962
9.0 CRITICAL

Use after free in Windows Virtual Filtering Platform (VFP) allows an unauthorized attacker to execute code over a network.

Nov 10, 2026
CVE-2026-95961
7.0 HIGH

Double free in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-95960
8.8 HIGH

Access of resource using incompatible type ('type confusion') in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-95956
8.1 HIGH

Use after free in Windows eSCL Scanner allows an unauthorized attacker to execute code over a network.

Nov 10, 2026
CVE-2026-95953
7.8 HIGH

Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-95951
7.8 HIGH

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-95950
7.0 HIGH

Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-95948
7.8 HIGH

Stack-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-95947
7.8 HIGH

An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files. The vulnerability could allow elevation of privilege if …

Nov 10, 2026
CVE-2026-95946
5.5 MEDIUM

Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to disclose information locally.

Nov 10, 2026
CVE-2026-95944
5.5 MEDIUM

Weak authentication in Windows App Readiness Service allows an authorized attacker to perform tampering locally.

Nov 10, 2026
CVE-2026-95942
7.8 HIGH

Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-95938
7.0 HIGH

Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-95935
7.8 HIGH

Integer overflow or wraparound in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-95934
7.8 HIGH

Double free in Windows Diagnostic Policy Service allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-95933
7.8 HIGH

Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-95932
7.8 HIGH

Inclusion of functionality from untrusted control sphere in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-95923
7.0 HIGH

Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-95922
7.0 HIGH

Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-95920
7.8 HIGH

Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-95913
5.9 MEDIUM

Use after free in Windows Hyper-V allows an unauthorized attacker to deny service over a network.

Nov 10, 2026
CVE-2026-95910
6.7 MEDIUM

Improper certificate validation in Windows Hyper-V allows an authorized attacker to bypass a security feature locally.

Nov 10, 2026
CVE-2026-95909
7.8 HIGH

Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-95908
5.5 MEDIUM

Out-of-bounds read in Remote Desktop Client allows an authorized attacker to disclose information locally.

Nov 10, 2026
CVE-2026-95906
7.0 HIGH

Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-95905
6.8 MEDIUM

Heap-based buffer overflow in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack.

Nov 10, 2026
CVE-2026-95902
7.8 HIGH

Heap-based buffer overflow in Windows USB Hub Driver allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-95901
9.8 CRITICAL

Double free in Windows Microsoft DirectMusic allows an unauthorized attacker to execute code over a network.

Nov 10, 2026
CVE-2026-95898
7.8 HIGH

Heap-based buffer overflow in Windows iSCSI allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-95896
7.8 HIGH

Heap-based buffer overflow in Windows Microsoft DirectMusic allows an authorized attacker to execute code locally.

Nov 10, 2026
CVE-2026-95895
7.8 HIGH

Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-95894
7.8 HIGH

Heap-based buffer overflow in Windows Task Scheduler allows an authorized attacker to elevate privileges locally.

Nov 10, 2026

Scan your infrastructure for known CVEs

Free website and port scanning — find vulnerabilities before attackers do.

Patch and protect

Block known exploits with a web application firewall while you patch, keep your own devices clean, or test the fix on a fresh server.

Compare VPS prices →

Affiliate links: we may earn a commission, your price stays the same.