CVE Database

160723+ vulnerabilities with CVSS scores, EPSS exploit predictions, and CISA KEV status. Updated daily.

Filter: All CRITICAL HIGH MEDIUM LOW CISA KEV
Sort: Newest CVSS EPSS
CVE-2026-119389
7.0 HIGH

Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-119388
7.0 HIGH

Use after free in Quality Windows Audio/Video Experience (QWAVE) service allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-119387
7.0 HIGH

Use after free in Quality Windows Audio/Video Experience (QWAVE) service allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-119386
7.0 HIGH

Use after free in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-119385
4.7 MEDIUM

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hyper-V allows an authorized attacker to deny service locally.

Nov 10, 2026
CVE-2026-119383
6.6 MEDIUM

Use of uninitialized resource in Windows Smart Card allows an authorized attacker to elevate privileges with a physical attack.

Nov 10, 2026
CVE-2026-119382
7.8 HIGH

Heap-based buffer overflow in Windows TPM allows an authorized attacker to elevate privileges locally.

Nov 10, 2026
CVE-2026-118750
7.5 HIGH

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.

Nov 10, 2026
CVE-2026-118749
7.5 HIGH

Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to deny service over a network.

Nov 10, 2026
CVE-2026-118748
7.5 HIGH

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.

Nov 10, 2026
CVE-2026-118747
7.5 HIGH

Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.

Nov 10, 2026
CVE-2026-118746
6.8 MEDIUM

Not failing securely ('failing open') in .NET allows an unauthorized attacker to bypass a security feature over a network.

Nov 10, 2026
CVE-2026-118745
8.8 HIGH

Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.

Nov 10, 2026
CVE-2026-118742
8.6 HIGH

Incorrect permission assignment for critical resource in Azure Front Door (AFD) allows an unauthorized attacker to elevate privileges over a network.

Nov 10, 2026
CVE-2026-118741
8.1 HIGH

Improper authentication in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network.

Nov 10, 2026
CVE-2026-118740
9.1 CRITICAL

Missing authorization in Aspire allows an unauthorized attacker to bypass a security feature over a network.

Nov 10, 2026
CVE-2026-118739
6.5 MEDIUM

Missing release of memory after effective lifetime in Windows DHCP Client allows an unauthorized attacker to deny service over an adjacent network.

Nov 10, 2026
CVE-2026-118737
8.1 HIGH

Improper verification of cryptographic signature in Windows Remote Procedure Call Runtime allows an unauthorized attacker to execute code over a network.

Nov 10, 2026
CVE-2026-118736
5.5 MEDIUM

Improper access control in Windows Network File System allows an authorized attacker to disclose information locally.

Nov 10, 2026
CVE-2026-118735
7.5 HIGH

Weak authentication in Active Directory Domain Services allows an authorized attacker to elevate privileges over a network.

Nov 10, 2026
CVE-2026-118732
8.8 HIGH

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Nov 10, 2026
CVE-2026-118731
8.8 HIGH

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Nov 10, 2026
CVE-2026-118730
8.8 HIGH

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Nov 10, 2026
CVE-2026-118729
8.8 HIGH

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Nov 10, 2026
CVE-2026-118728
6.5 MEDIUM

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

Nov 10, 2026
CVE-2026-118727
6.5 MEDIUM

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

Nov 10, 2026
CVE-2026-118726
8.8 HIGH

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Nov 10, 2026
CVE-2026-118725
8.8 HIGH

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to elevate privileges over a network.

Nov 10, 2026
CVE-2026-118724
8.8 HIGH

Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Nov 10, 2026
CVE-2026-118723
7.8 HIGH

Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Nov 10, 2026
CVE-2026-118722
8.8 HIGH

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Nov 10, 2026
CVE-2026-118721
8.8 HIGH

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Nov 10, 2026
CVE-2026-118720
8.8 HIGH

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Nov 10, 2026
CVE-2026-118719
8.8 HIGH

Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Nov 10, 2026
CVE-2026-118718
8.8 HIGH

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Nov 10, 2026
CVE-2026-118717
8.8 HIGH

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Nov 10, 2026
CVE-2026-118716
8.8 HIGH

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Nov 10, 2026
CVE-2026-118715
8.8 HIGH

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to elevate privileges over a network.

Nov 10, 2026
CVE-2026-118714
8.8 HIGH

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Nov 10, 2026
CVE-2026-118713
8.8 HIGH

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Nov 10, 2026
CVE-2026-118712
8.8 HIGH

Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Nov 10, 2026
CVE-2026-118711
8.8 HIGH

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Nov 10, 2026
CVE-2026-118710
8.8 HIGH

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Nov 10, 2026
CVE-2026-118709
8.8 HIGH

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Nov 10, 2026
CVE-2026-118708
8.8 HIGH

Release of invalid pointer or reference in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Nov 10, 2026
CVE-2026-118707
8.8 HIGH

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Nov 10, 2026
CVE-2026-118706
8.8 HIGH

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Nov 10, 2026
CVE-2026-118705
8.8 HIGH

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Nov 10, 2026
CVE-2026-118704
8.8 HIGH

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Nov 10, 2026
CVE-2026-118703
8.8 HIGH

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Nov 10, 2026

Scan your infrastructure for known CVEs

Free website and port scanning — find vulnerabilities before attackers do.

Patch and protect

Block known exploits with a web application firewall while you patch, keep your own devices clean, or test the fix on a fresh server.

Compare VPS prices →

Affiliate links: we may earn a commission, your price stays the same.