CVE Database

161541+ vulnerabilities with CVSS scores, EPSS exploit predictions, and CISA KEV status. Updated daily.

Filter: All CRITICAL HIGH MEDIUM LOW CISA KEV
Sort: Newest CVSS EPSS
CVE-2026-83976
7.8 HIGH

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-83975
7.8 HIGH

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-83974
7.8 HIGH

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-83973
7.8 HIGH

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-83972
7.8 HIGH

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-83971
7.8 HIGH

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-83970
7.8 HIGH

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-83969
7.8 HIGH

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-83968
7.8 HIGH

Use after free in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-83967
7.8 HIGH

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-83955
7.8 HIGH

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-83954
7.8 HIGH

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-83952
7.8 HIGH

Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-83951
5.5 MEDIUM

Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

Sep 8, 2026
CVE-2026-83949
5.5 MEDIUM

Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

Sep 8, 2026
CVE-2026-83948
8.0 HIGH

Improper neutralization of special elements used in a command ('command injection') in Microsoft Azure CLI allows an authorized attacker to execute code over a network.

Sep 8, 2026
CVE-2026-83942
7.8 HIGH

Missing authorization in Windows Kernel allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-83941
9.9 CRITICAL

Missing authorization in Entra ID allows an authorized attacker to elevate privileges over a network.

Sep 8, 2026
CVE-2026-83940
7.0 HIGH

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-83939
8.2 HIGH

Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-83501
5.5 MEDIUM

Out-of-bounds read in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to disclose information locally.

Sep 8, 2026
CVE-2026-83498
7.8 HIGH

Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-81963
7.8 HIGH KEV

Improper link resolution before file access ('link following') in Windows Update Stack allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-81960
7.8 HIGH

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Sep 8, 2026
CVE-2026-81959
7.8 HIGH

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Sep 8, 2026
CVE-2026-81958
5.5 MEDIUM

Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

Sep 8, 2026
CVE-2026-81957
7.8 HIGH

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Sep 8, 2026
CVE-2026-81956
7.8 HIGH

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Sep 8, 2026
CVE-2026-81955
8.8 HIGH

Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.

Sep 8, 2026
CVE-2026-81954
7.8 HIGH

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Sep 8, 2026
CVE-2026-81953
7.8 HIGH

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Sep 8, 2026
CVE-2026-81952
8.8 HIGH

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Sep 8, 2026
CVE-2026-81951
7.8 HIGH

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Sep 8, 2026
CVE-2026-81950
7.8 HIGH

Double free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Sep 8, 2026
CVE-2026-81949
7.8 HIGH

Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Sep 8, 2026
CVE-2026-81948
7.8 HIGH

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Sep 8, 2026
CVE-2026-81947
7.8 HIGH

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Sep 8, 2026
CVE-2026-81824
4.7 MEDIUM

The vulnerability, if exploited, could allow a miscreant to run arbitrary JavaScript code in a browser session of a PIMBoards user who was socially engineered …

Sep 8, 2026
CVE-2026-81823
5.3 MEDIUM

The vulnerability, if exploited, could allow an unauthenticated miscreant to perform read operations intended only for PIMBoards users, resulting in information disclosure. Write operations are …

Sep 8, 2026
CVE-2026-81822
8.4 HIGH

The vulnerability, if exploited, could allow a miscreant with read access to PIMBoards project files to reverse engineer PIMBoards users’ app-native passwords through computational brute-forcing …

Sep 8, 2026
CVE-2026-81821
8.4 HIGH

The vulnerability, if exploited, could allow a miscreant with read access to PIMBoards project files to decrypt and view sensitive information.

Sep 8, 2026
CVE-2026-81401
5.5 MEDIUM

Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

Sep 8, 2026
CVE-2026-81400
5.5 MEDIUM

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

Sep 8, 2026
CVE-2026-81399
5.5 MEDIUM

Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

Sep 8, 2026
CVE-2026-81398
7.8 HIGH

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Sep 8, 2026
CVE-2026-81397
7.8 HIGH

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Sep 8, 2026
CVE-2026-81396
7.8 HIGH

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Sep 8, 2026
CVE-2026-81395
5.5 MEDIUM

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

Sep 8, 2026
CVE-2026-81394
5.5 MEDIUM

Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

Sep 8, 2026
CVE-2026-81393
5.5 MEDIUM

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

Sep 8, 2026

Scan your infrastructure for known CVEs

Free website and port scanning — find vulnerabilities before attackers do.

Patch and protect

Block known exploits with a web application firewall while you patch, keep your own devices clean, or test the fix on a fresh server.

Compare VPS prices →

Affiliate links: we may earn a commission, your price stays the same.