CVE Database

161541+ vulnerabilities with CVSS scores, EPSS exploit predictions, and CISA KEV status. Updated daily.

Filter: All CRITICAL HIGH MEDIUM LOW CISA KEV
Sort: Newest CVSS EPSS
CVE-2026-73016
8.8 HIGH

Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.

Sep 8, 2026
CVE-2026-73015
7.8 HIGH

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-73014
7.8 HIGH

Missing authorization in Data Sharing Service Client allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-73013
8.8 HIGH

Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.

Sep 8, 2026
CVE-2026-73012
8.8 HIGH

Heap-based buffer overflow in Windows Management Services allows an authorized attacker to elevate privileges over a network.

Sep 8, 2026
CVE-2026-73011
7.8 HIGH

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-73010
9.8 CRITICAL

Use after free in Windows Failover Cluster allows an unauthorized attacker to execute code over a network.

Sep 8, 2026
CVE-2026-73009
9.8 CRITICAL

Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.

Sep 8, 2026
CVE-2026-73008
5.5 MEDIUM

Exposure of private personal information to an unauthorized actor in Windows Biometric Service allows an authorized attacker to disclose information locally.

Sep 8, 2026
CVE-2026-73007
7.8 HIGH

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-73006
8.8 HIGH

Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.

Sep 8, 2026
CVE-2026-73005
7.0 HIGH

Use after free in Windows Authentication Methods allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-73004
5.5 MEDIUM

Missing authentication for critical function in Windows Autopilot allows an authorized attacker to perform tampering locally.

Sep 8, 2026
CVE-2026-73003
7.0 HIGH

Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-73002
7.8 HIGH

Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-73001
7.8 HIGH

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-73000
7.8 HIGH

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-72999
6.8 MEDIUM

Out-of-bounds read in Windows USB Hub Driver allows an unauthorized attacker to elevate privileges with a physical attack.

Sep 8, 2026
CVE-2026-72997
7.8 HIGH

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-72996
7.8 HIGH

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-72995
7.8 HIGH

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-72994
7.8 HIGH

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-72993
7.8 HIGH

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-72992
7.8 HIGH

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-72991
7.8 HIGH

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-72990
7.8 HIGH

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-72989
7.5 HIGH

Use of uninitialized resource in Windows Failover Cluster allows an unauthorized attacker to disclose information over a network.

Sep 8, 2026
CVE-2026-72988
7.8 HIGH

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-72987
8.1 HIGH

Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.

Sep 8, 2026
CVE-2026-72986
8.8 HIGH

Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.

Sep 8, 2026
CVE-2026-72985
6.8 MEDIUM

Heap-based buffer overflow in Windows Volume Shadow Copy allows an unauthorized attacker to elevate privileges with a physical attack.

Sep 8, 2026
CVE-2026-72983
9.8 CRITICAL

Use after free in Windows Internet Connection Sharing (ICS) allows an unauthorized attacker to execute code over a network.

Sep 8, 2026
CVE-2026-72982
9.8 CRITICAL

Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network.

Sep 8, 2026
CVE-2026-72981
8.1 HIGH

Use after free in IP Helper allows an unauthorized attacker to execute code over a network.

Sep 8, 2026
CVE-2026-72980
4.4 MEDIUM

Uncontrolled search path element in Windows Hello allows an authorized attacker to bypass a security feature locally.

Sep 8, 2026
CVE-2026-72979
9.8 CRITICAL

Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

Sep 8, 2026
CVE-2026-72978
5.9 MEDIUM

Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.

Sep 8, 2026
CVE-2026-72977
6.5 MEDIUM

Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.

Sep 8, 2026
CVE-2026-72976
5.0 MEDIUM

Out-of-bounds read in Microsoft Office Word allows an authorized attacker to disclose information locally.

Sep 8, 2026
CVE-2026-72975
6.5 MEDIUM

Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.

Sep 8, 2026
CVE-2026-72974
6.5 MEDIUM

Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

Sep 8, 2026
CVE-2026-72973
8.8 HIGH

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Sep 8, 2026
CVE-2026-72972
8.8 HIGH

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Sep 8, 2026
CVE-2026-72967
7.8 HIGH

Heap-based buffer overflow in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-72966
5.5 MEDIUM

Missing authorization in Windows Remote Access Connection Manager allows an authorized attacker to perform tampering locally.

Sep 8, 2026
CVE-2026-72965
7.8 HIGH

Use after free in Windows WebClient Service allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-72964
5.5 MEDIUM

Missing authentication for critical function in Windows Internet Connection Sharing (ICS) allows an authorized attacker to perform tampering locally.

Sep 8, 2026
CVE-2026-72963
7.0 HIGH

Use after free in Windows Modern Execution Server allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-72962
8.2 HIGH

Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-72961
8.2 HIGH

Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

Sep 8, 2026

Scan your infrastructure for known CVEs

Free website and port scanning — find vulnerabilities before attackers do.

Patch and protect

Block known exploits with a web application firewall while you patch, keep your own devices clean, or test the fix on a fresh server.

Compare VPS prices →

Affiliate links: we may earn a commission, your price stays the same.