CVE Database

161468+ vulnerabilities with CVSS scores, EPSS exploit predictions, and CISA KEV status. Updated daily.

Filter: All CRITICAL HIGH MEDIUM LOW CISA KEV
Sort: Newest CVSS EPSS
CVE-2026-70025
5.3 MEDIUM

Use after free in Windows Netlogon allows an authorized attacker to deny service over a network.

Oct 13, 2026
CVE-2026-70024
9.8 CRITICAL

Stack-based buffer overflow in Windows Internet Information Services allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-70023
7.8 HIGH

Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-70021
7.0 HIGH

Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-70017
5.5 MEDIUM

Access of resource using incompatible type ('type confusion') in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally.

Oct 13, 2026
CVE-2026-70015
7.8 HIGH

Use after free in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-70014
7.5 HIGH

Use after free in Windows Cryptographic Services allows an authorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-70013
8.1 HIGH

Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-70012
7.5 HIGH

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-70011
5.5 MEDIUM

Out-of-bounds read in Windows IP Over USB Service allows an authorized attacker to disclose information locally.

Oct 13, 2026
CVE-2026-70010
7.8 HIGH

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-70008
7.8 HIGH

Integer overflow or wraparound in Windows IP Over USB Service allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-70007
8.8 HIGH

Out-of-bounds write in .NET Framework allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-70006
7.5 HIGH

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-70005
5.9 MEDIUM

Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to bypass a security feature over a network.

Oct 13, 2026
CVE-2026-70004
7.5 HIGH

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-69999
5.5 MEDIUM

Out-of-bounds read in Windows Update allows an authorized attacker to disclose information locally.

Oct 13, 2026
CVE-2026-69998
7.5 HIGH

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-69997
7.5 HIGH

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-69996
7.5 HIGH

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-69995
7.5 HIGH

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-69994
7.5 HIGH

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-69992
7.5 HIGH

Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-69991
7.5 HIGH

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-69988
7.5 HIGH

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-69987
7.5 HIGH

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-69986
7.5 HIGH

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-69985
8.8 HIGH

Heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-69984
7.5 HIGH

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-69982
5.9 MEDIUM

Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to bypass a security feature over a network.

Oct 13, 2026
CVE-2026-69979
5.5 MEDIUM

Improper protection of alternate path in Windows AppX Deployment Service allows an authorized attacker to bypass a security feature locally.

Oct 13, 2026
CVE-2026-69978
5.6 MEDIUM

Null pointer dereference in Windows VMSwitch allows an authorized attacker to deny service locally.

Oct 13, 2026
CVE-2026-69977
7.0 HIGH

Use after free in Quality Windows Audio/Video Experience (QWAVE) service allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-69976
7.5 HIGH

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-69974
4.7 MEDIUM

Out-of-bounds read in Desktop Window Manager allows an authorized attacker to disclose information locally.

Oct 13, 2026
CVE-2026-69973
6.5 MEDIUM

Improper limitation of a pathname to a restricted directory ('path traversal') in Windows Libarchive allows an unauthorized attacker to perform tampering over a network.

Oct 13, 2026
CVE-2026-69971
5.5 MEDIUM

Incorrect authorization in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.

Oct 13, 2026
CVE-2026-69970
7.0 HIGH

Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-69969
4.7 MEDIUM

Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized attacker to disclose information locally.

Oct 13, 2026
CVE-2026-69968
6.5 MEDIUM

Relative path traversal in Windows Libarchive allows an unauthorized attacker to perform tampering over a network.

Oct 13, 2026
CVE-2026-69967
5.5 MEDIUM

Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to disclose information locally.

Oct 13, 2026
CVE-2026-69966
7.8 HIGH

Integer overflow or wraparound in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-69964
7.0 HIGH

Use after free in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-69963
7.8 HIGH

Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-69959
7.8 HIGH

Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to execute code locally.

Oct 13, 2026
CVE-2026-69958
6.8 MEDIUM

Heap-based buffer overflow in Windows Overlay Filter allows an unauthorized attacker to execute code with a physical attack.

Oct 13, 2026
CVE-2026-69957
7.8 HIGH

Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-69955
6.5 MEDIUM

Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information over a network.

Oct 13, 2026
CVE-2026-69954
5.5 MEDIUM

Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally.

Oct 13, 2026
CVE-2026-69953
7.8 HIGH

Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

Oct 13, 2026

Scan your infrastructure for known CVEs

Free website and port scanning — find vulnerabilities before attackers do.

Patch and protect

Block known exploits with a web application firewall while you patch, keep your own devices clean, or test the fix on a fresh server.

Compare VPS prices →

Affiliate links: we may earn a commission, your price stays the same.