[ Latest · 16,702 CVEs ]
Newly published CVEs.
Every CVE the NVD lists as published in the last 30 days, newest first. Rows marked green on the left are on the matters-most list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-83588 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 10 Version 1607Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83634 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 11 version 23H2Double free in Windows BitLocker allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83635 | 13 Oct 2026 | CVSS 7.5 | Microsoft Windows Server 2012Out-of-bounds read in DNS Server allows an unauthorized attacker to deny service over a network. | |
| CVE-2026-83636 | 13 Oct 2026 | CVSS 6.5 | Microsoft Windows 10 Version 21H2Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally. | |
| CVE-2026-83637 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 10 Version 1607Out-of-bounds read in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83582 | 13 Oct 2026 | CVSS 4.7 | Microsoft Windows 10 Version 1607Use after free in Windows Graphics Kernel allows an authorized attacker to disclose information locally. | |
| CVE-2026-83583 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 10 Version 1607Improper access control in Windows Geotag Broker allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83584 | 13 Oct 2026 | CVSS 7.0 | Microsoft Windows 10 Version 1607Use after free in Windows Smart Card allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83585 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 10 Version 1607Use of externally-controlled format string in Windows NTFS allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83586 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 11 version 23H2Weak authentication in Windows Resilient File System (ReFS) Deduplication Service allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83574 | 13 Oct 2026 | CVSS 7.0 | Microsoft Windows 10 Version 1607Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83575 | 13 Oct 2026 | CVSS 7.0 | Microsoft Windows 10 Version 1607Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83578 | 13 Oct 2026 | CVSS 9.8 | Microsoft Windows 10 Version 1607Integer underflow (wrap or wraparound) in Windows PowerShell allows an unauthorized attacker to execute code over a network. | |
| CVE-2026-83579 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 10 Version 1607Heap-based buffer overflow in Windows Smart Card allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83580 | 13 Oct 2026 | CVSS 7.0 | Microsoft Windows 10 Version 1607Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83567 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 10 Version 1607Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83568 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 11 Version 24H2Improper access control in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83569 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 10 Version 1809Heap-based buffer overflow in HID Parser Library allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83570 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 10 Version 1607Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83571 | 13 Oct 2026 | CVSS 5.5 | Microsoft Windows 10 Version 1607Null pointer dereference in Windows Audio Service allows an authorized attacker to disclose information locally. | |
| CVE-2026-83573 | 13 Oct 2026 | CVSS 6.8 | Microsoft Windows 10 Version 1607Integer overflow or wraparound in Windows Kernel Mode Driver allows an unauthorized attacker to elevate privileges with a physical attack. | |
| CVE-2026-83521 | 13 Oct 2026 | CVSS 6.5 | Microsoft Windows 10 Version 1607Out-of-bounds read in Windows IKE Extension allows an authorized attacker to disclose information over a network. | |
| CVE-2026-83522 | 13 Oct 2026 | CVSS 8.1 | Microsoft Windows 10 Version 1607Reliance on untrusted inputs in a security decision in Windows IKE Extension allows an unauthorized attacker to perform spoofing over a network. | |
| CVE-2026-83523 | 13 Oct 2026 | CVSS 8.8 | Microsoft Windows 11 Version 24H2Heap-based buffer overflow in Windows Image Acquisition allows an unauthorized attacker to execute code over a network. | |
| CVE-2026-83564 | 13 Oct 2026 | CVSS 7.0 | Microsoft Windows 10 Version 1607Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83565 | 13 Oct 2026 | CVSS 5.5 | Microsoft Windows 10 Version 1607Buffer over-read in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information locally. | |
| CVE-2026-83566 | 13 Oct 2026 | CVSS 7.0 | Microsoft Windows 11 Version 24H2Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83515 | 13 Oct 2026 | CVSS 6.5 | Microsoft Windows 10 Version 1607Use of uninitialized resource in RPC Runtime allows an unauthorized attacker to disclose information over a network. | |
| CVE-2026-83516 | 13 Oct 2026 | CVSS 7.5 | Microsoft Windows 10 Version 1809Out-of-bounds read in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to deny service over a network. | |
| CVE-2026-83517 | 13 Oct 2026 | CVSS 9.8 | Microsoft Windows 10 Version 1607Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. | |
| CVE-2026-83518 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 11 version 23H2Heap-based buffer overflow in RPC Runtime allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83519 | 13 Oct 2026 | CVSS 9.8 | Microsoft Windows 10 Version 1607Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network. | |
| CVE-2026-83520 | 13 Oct 2026 | CVSS 8.8 | Microsoft Security Advisory CVE-2026-83520 - .NET and Visual Studio Remote Code ExecutionDeserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network. | Fix |
| CVE-2026-83509 | 13 Oct 2026 | CVSS 7.0 | Microsoft Windows 10 Version 1607Untrusted search path in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83510 | 13 Oct 2026 | CVSS 7.0 | Microsoft Windows 10 Version 1607Time-of-check time-of-use (toctou) race condition in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83511 | 13 Oct 2026 | CVSS 7.4 | Microsoft Windows 10 Version 1607Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network. | |
| CVE-2026-83513 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 10 Version 1607Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83514 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 10 Version 1607Heap-based buffer overflow in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83499 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 10 Version 1607Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83500 | 13 Oct 2026 | CVSS 6.1 | Microsoft Windows 10 Version 1607Url redirection to untrusted site ('open redirect') in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical… | |
| CVE-2026-83504 | 13 Oct 2026 | CVSS 4.7 | Microsoft Windows 11 version 23H2Time-of-check time-of-use (toctou) race condition in Windows SmartScreen allows an authorized attacker to disclose information locally. | |
| CVE-2026-83505 | 13 Oct 2026 | CVSS 7.0 | Microsoft Windows 10 Version 1607Time-of-check time-of-use (toctou) race condition in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83506 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 10 Version 1607Untrusted search path in Servicing Stack Updates allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-83507 | 13 Oct 2026 | CVSS 5.5 | Microsoft Windows 10 Version 21H2Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authorized attacker to disclose… | |
| CVE-2026-83508 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 10 Version 1607Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-77910 | 13 Oct 2026 | CVSS 8.8 | Microsoft Exchange Server 2016 Cumulative Update 23Incorrect authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network. | |
| CVE-2026-78459 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 10 Version 1607Heap-based buffer overflow in Windows Internet Information Services allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-81964 | 13 Oct 2026 | CVSS 5.5 | Microsoft Windows 10 Version 21H2Use of hard-coded credentials in Windows Update Orchestrator Service allows an authorized attacker to bypass a security feature locally. | |
| CVE-2026-81969 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 10 Version 1607Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-81971 | 13 Oct 2026 | CVSS 7.0 | Microsoft Windows 10 Version 1607Concurrent execution using shared resource with improper synchronization ('race condition') in Windows NTFS allows an authorized attacker to elevate… | |
| CVE-2026-75120 | 13 Oct 2026 | CVSS 9.3 | OpenText Endpoint InvestigatorThe OpenText™ (EnCase SAFE Agents) component utilized by OpenText™ Endpoint Investigator, OpenText™ Endpoint Forensics & Response, OpenText™… | |
| CVE-2026-77496 | 13 Oct 2026 | CVSS 8.8 | Microsoft Windows 10 Version 1607Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network. | |
| CVE-2026-77902 | 13 Oct 2026 | CVSS 8.8 | Microsoft 365 Apps for EnterpriseHeap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | |
| CVE-2026-72969 | 13 Oct 2026 | CVSS 7.0 | Microsoft Windows 11 version 23H2Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-73027 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 10 Version 1607External control of system or configuration setting in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-70580 | 13 Oct 2026 | CVSS 8.8 | Microsoft Windows 10 Version 1809Missing authentication for critical function in Windows Credential Guard allows an authorized attacker to perform spoofing locally. | |
| CVE-2026-71347 | 13 Oct 2026 | CVSS 6.4 | Microsoft Windows 10 Version 1607Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Security Center allows an authorized attacker… | |
| CVE-2026-72934 | 13 Oct 2026 | CVSS 7.0 | Microsoft Windows 11 version 23H2Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-72955 | 13 Oct 2026 | CVSS 7.0 | Microsoft Windows 11 version 23H2Use after free in Windows Application Compatibility Cache allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-72968 | 13 Oct 2026 | CVSS 7.0 | Microsoft Windows 10 Version 1607Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-70300 | 13 Oct 2026 | CVSS 9.8 | Microsoft 365 Apps for EnterpriseUntrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | |
| CVE-2026-70301 | 13 Oct 2026 | CVSS 8.8 | Microsoft 365 Apps for EnterpriseHeap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | |
| CVE-2026-70302 | 13 Oct 2026 | CVSS 8.8 | Microsoft 365 Apps for EnterpriseHeap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | |
| CVE-2026-70303 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 10 Version 1607Out-of-bounds write in Windows Kernel allows an authorized attacker to elevate privileges locally. | Fix |
| CVE-2026-70343 | 13 Oct 2026 | CVSS 8.8 | Microsoft MPEG-2 Video ExtensionHeap-based buffer overflow in Microsoft MPEG-2 Video Extension allows an unauthorized attacker to execute code over a network. | |
| CVE-2026-70566 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 10 Version 1607Null pointer dereference in Windows Schannel allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-70571 | 13 Oct 2026 | CVSS 8.1 | Microsoft Exchange Server 2016 Cumulative Update 23Stack-based buffer overflow in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network. | |
| CVE-2026-70293 | 13 Oct 2026 | CVSS 5.5 | Microsoft Windows 10 Version 1607Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. | Fix |
| CVE-2026-70294 | 13 Oct 2026 | CVSS 5.5 | Microsoft Windows 10 Version 1607Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. | Fix |
| CVE-2026-70295 | 13 Oct 2026 | CVSS 5.5 | Microsoft Windows 10 Version 1607Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. | Fix |
| CVE-2026-70297 | 13 Oct 2026 | CVSS 8.8 | Microsoft Skype for Business Server 2015 CU13Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to execute code over a network. | |
| CVE-2026-70298 | 13 Oct 2026 | CVSS 6.5 | Microsoft SharePoint Server Subscription EditionImproper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to… | Fix |
| CVE-2026-70299 | 13 Oct 2026 | CVSS 8.8 | Microsoft Windows 11 version 23H2Improper access control in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-70285 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 10 Version 1607Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | Fix |
| CVE-2026-70286 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 10 Version 1607Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-70287 | 13 Oct 2026 | CVSS 8.8 | Microsoft 365 Apps for EnterpriseHeap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | |
| CVE-2026-70288 | 13 Oct 2026 | CVSS 5.5 | Microsoft Windows 10 Version 1607Time-of-check time-of-use (toctou) race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. | Fix |
| CVE-2026-70291 | 13 Oct 2026 | CVSS 9.8 | Microsoft 365 Apps for EnterpriseHeap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. | |
| CVE-2026-70292 | 13 Oct 2026 | CVSS 5.5 | Microsoft Windows 10 Version 1607Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. | Fix |
| CVE-2026-70277 | 13 Oct 2026 | CVSS 5.5 | Microsoft Windows 10 Version 1607Out-of-bounds read in Windows Fast FAT Driver allows an unauthorized attacker to disclose information locally. | |
| CVE-2026-70278 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 10 Version 1607Heap-based buffer overflow in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-70279 | 13 Oct 2026 | CVSS 9.3 | Microsoft Exchange Server 2016 Cumulative Update 23Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to… | |
| CVE-2026-70280 | 13 Oct 2026 | CVSS 4.4 | Microsoft Windows 10 Version 21H2Incorrect authorization in Windows Hello allows an authorized attacker to bypass a security feature locally. | |
| CVE-2026-70281 | 13 Oct 2026 | CVSS 7.5 | Microsoft 365 Apps for EnterpriseOut-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network. | |
| CVE-2026-70282 | 13 Oct 2026 | CVSS 8.8 | Microsoft 365 Apps for EnterpriseHeap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. | |
| CVE-2026-70284 | 13 Oct 2026 | CVSS 5.5 | Microsoft Windows 10 Version 1607Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. | Fix |
| CVE-2026-70272 | 13 Oct 2026 | CVSS 7.0 | Microsoft Windows 10 Version 1607Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-70273 | 13 Oct 2026 | CVSS 7.0 | Microsoft Windows 11 Version 24H2Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | Fix |
| CVE-2026-70274 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 11 version 23H2Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-70275 | 13 Oct 2026 | CVSS 8.8 | Microsoft Windows 10 Version 1607Untrusted pointer dereference in Windows CD-ROM Driver allows an unauthorized attacker to execute code over a network. | |
| CVE-2026-70276 | 13 Oct 2026 | CVSS 7.0 | Microsoft 365 Apps for EnterpriseUse after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-70263 | 13 Oct 2026 | CVSS 6.5 | Microsoft 365 Apps for EnterpriseOut-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. | |
| CVE-2026-70264 | 13 Oct 2026 | CVSS 5.5 | Microsoft Windows DefenderImproper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to disclose information locally. | |
| CVE-2026-70266 | 13 Oct 2026 | CVSS 8.8 | Microsoft SharePoint Server Subscription EditionImproper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to… | Fix |
| CVE-2026-70267 | 13 Oct 2026 | CVSS 7.2 | Microsoft SharePoint Server Subscription EditionInclusion of functionality from untrusted control sphere in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | Fix |
| CVE-2026-70268 | 13 Oct 2026 | CVSS 8.8 | Microsoft 365 Apps for EnterpriseHeap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | |
| CVE-2026-70269 | 13 Oct 2026 | CVSS 8.1 | Microsoft 365 Apps for EnterpriseHeap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | |
| CVE-2026-70270 | 13 Oct 2026 | CVSS 5.5 | Microsoft Windows 10 Version 1607Untrusted pointer dereference in Windows Container Isolation FS Filter Driver allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-70271 | 13 Oct 2026 | CVSS 7.0 | Microsoft Windows 10 Version 1607Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | Fix |
| CVE-2026-70256 | 13 Oct 2026 | CVSS 8.8 | Microsoft 365 Apps for EnterpriseHeap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. |
Page 71 of 168