Vulnerability intelligence

Explore. Understand.
Stay ahead.

A clearer way to explore known software vulnerabilities. Search CVE records, review severity and CVSS scores, and keep track of the issues that matter to you.

Independent vulnerability information and monitoring project

Search the vulnerability database

Find a CVE by ID, keyword, severity or CVSS score.

Centralized CVE data
Browse vulnerability records collected from public sources.
Severity at a glance
Compare severity levels and available CVSS scores.
Personal email alerts
Create alert preferences for critical issues and custom matches.
Browse the database

Latest vulnerability records

52 906
matching records · page 698 of 2117
CVE-2026-88159 HIGH CVSS 8.83.1

Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-88158 MEDIUM CVSS 5.53.1

Out-of-bounds read in Microsoft Digest Authentication allows an authorized attacker to disclose information locally.

Published: 13 Oct 2026 Updated: 31 Oct 2026 View details →
CVE-2026-88157 HIGH CVSS 8.83.1

Heap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-88152 HIGH CVSS 7.83.1

Use after free in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-88151 MEDIUM CVSS 6.53.1

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

Published: 13 Oct 2026 Updated: 10 Nov 2026 View details →
CVE-2026-88149 HIGH CVSS 7.03.1

Double free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-88147 HIGH CVSS 7.83.1

Heap-based buffer overflow in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-88146 HIGH CVSS 7.03.1

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-88143 HIGH CVSS 7.83.1

Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-88142 HIGH CVSS 8.83.1

Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-88141 HIGH CVSS 7.03.1

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-88140 MEDIUM CVSS 5.53.1

Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-88139 HIGH CVSS 7.03.1

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-88137 MEDIUM CVSS 6.53.1

Files or directories accessible to external parties in WebDAV allows an authorized attacker to disclose information over a network.

Published: 13 Oct 2026 Updated: 31 Oct 2026 View details →
CVE-2026-88136 HIGH CVSS 8.83.1

Improper resolution of path equivalence in WebDAV allows an authorized attacker to execute code over a network.

Published: 13 Oct 2026 Updated: 06 Nov 2026 View details →
CVE-2026-88135 HIGH CVSS 7.83.1

Improper access control in WebDAV allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 06 Nov 2026 View details →
CVE-2026-88134 HIGH CVSS 7.83.1

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-88133 HIGH CVSS 7.83.1

Improper authorization in Windows Portable Device Enumerator Service allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-88128 HIGH CVSS 7.83.1

Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-88127 HIGH CVSS 7.03.1

Use after free in Windows SMB Server allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-88126 HIGH CVSS 7.83.1

Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 06 Nov 2026 View details →
CVE-2026-88124 HIGH CVSS 7.03.1

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-88121 HIGH CVSS 8.83.1

Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-88120 HIGH CVSS 8.13.1

Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-88119 HIGH CVSS 8.13.1

Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →