CVE Database

161468+ vulnerabilities with CVSS scores, EPSS exploit predictions, and CISA KEV status. Updated daily.

Filter: All CRITICAL HIGH MEDIUM LOW CISA KEV
Sort: Newest CVSS EPSS
CVE-2026-85856
7.1 HIGH

Heap-based buffer overflow in Windows Internet Connection Sharing (ICS) allows an authorized attacker to execute code over an adjacent network.

Oct 13, 2026
CVE-2026-85855
7.0 HIGH

Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-85854
7.0 HIGH

Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-85853
7.0 HIGH

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-85852
5.5 MEDIUM

Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.

Oct 13, 2026
CVE-2026-85851
7.8 HIGH

Use after free in Windows SmartScreen allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-85850
7.8 HIGH

Release of invalid pointer or reference in Windows Kernel allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-85849
7.8 HIGH

Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-85848
7.8 HIGH

Heap-based buffer overflow in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-85847
6.5 MEDIUM

Out-of-bounds read in Windows Print Spooler Components allows an unauthorized attacker to disclose information over a network.

Oct 13, 2026
CVE-2026-85846
7.0 HIGH

Use after free in Windows Web Account Manager allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-85843
7.8 HIGH

Use of uninitialized resource in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-85842
7.8 HIGH

Use of externally-controlled format string in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-85841
6.6 MEDIUM

Use after free in Windows DHCP Server allows an authorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-85840
6.5 MEDIUM

Files or directories accessible to external parties in Windows Event Viewer allows an authorized attacker to disclose information over a network.

Oct 13, 2026
CVE-2026-85837
7.8 HIGH

Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-85836
7.8 HIGH

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-85835
5.5 MEDIUM

Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally.

Oct 13, 2026
CVE-2026-85834
7.0 HIGH

Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-85833
7.8 HIGH

Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-85832
7.8 HIGH

Heap-based buffer overflow in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-85831
5.5 MEDIUM

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to disclose information locally.

Oct 13, 2026
CVE-2026-85830
5.5 MEDIUM

Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locally.

Oct 13, 2026
CVE-2026-85829
7.8 HIGH

Double free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-85828
7.0 HIGH

Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-85827
7.0 HIGH

Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-85826
7.0 HIGH

Out-of-bounds write in Windows Fast FAT Driver allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-85825
7.0 HIGH

Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-85824
7.0 HIGH

Use after free in Windows Composite Image File System allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-85823
7.0 HIGH

Use after free in Windows Composite Image File System allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-85822
7.8 HIGH

Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-85821
6.5 MEDIUM

Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally.

Oct 13, 2026
CVE-2026-85820
7.8 HIGH

Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-85818
9.0 CRITICAL

Improper verification of cryptographic signature in Windows Schannel allows an unauthorized attacker to perform spoofing over a network.

Oct 13, 2026
CVE-2026-85817
8.8 HIGH

Reliance on untrusted inputs in a security decision in Windows PowerShell allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-85816
5.7 MEDIUM

Out-of-bounds read in Windows Wi-Fi Driver allows an authorized attacker to disclose information over an adjacent network.

Oct 13, 2026
CVE-2026-85815
5.5 MEDIUM

Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally.

Oct 13, 2026
CVE-2026-85814
9.8 CRITICAL

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-85812
5.5 MEDIUM

Files or directories accessible to external parties in Windows Bind Filter Driver allows an authorized attacker to disclose information locally.

Oct 13, 2026
CVE-2026-85811
7.5 HIGH

Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over an adjacent network.

Oct 13, 2026
CVE-2026-85810
7.0 HIGH

Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-85809
9.8 CRITICAL

Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine

Oct 13, 2026
CVE-2026-85808
7.5 HIGH

Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network.

Oct 13, 2026
CVE-2026-85807
7.8 HIGH

Integer overflow or wraparound in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-85806
9.8 CRITICAL

Integer underflow (wrap or wraparound) in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-85805
6.5 MEDIUM

Improperly implemented security check for standard in Windows PowerShell allows an unauthorized attacker to bypass a security feature over a network.

Oct 13, 2026
CVE-2026-85804
7.8 HIGH

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-85803
7.0 HIGH

Use after free in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-85802
7.0 HIGH

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-85800
7.8 HIGH

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

Oct 13, 2026

Scan your infrastructure for known CVEs

Free website and port scanning — find vulnerabilities before attackers do.

Patch and protect

Block known exploits with a web application firewall while you patch, keep your own devices clean, or test the fix on a fresh server.

Compare VPS prices →

Affiliate links: we may earn a commission, your price stays the same.