Vulnerability intelligence

Explore. Understand.
Stay ahead.

A clearer way to explore known software vulnerabilities. Search CVE records, review severity and CVSS scores, and keep track of the issues that matter to you.

Independent vulnerability information and monitoring project

Search the vulnerability database

Find a CVE by ID, keyword, severity or CVSS score.

Centralized CVE data
Browse vulnerability records collected from public sources.
Severity at a glance
Compare severity levels and available CVSS scores.
Personal email alerts
Create alert preferences for critical issues and custom matches.
Browse the database

Latest vulnerability records

52 907
matching records · page 702 of 2117
CVE-2026-85846 HIGH CVSS 7.03.1

Use after free in Windows Web Account Manager allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 29 Oct 2026 View details →
CVE-2026-85843 HIGH CVSS 7.83.1

Use of uninitialized resource in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 29 Oct 2026 View details →
CVE-2026-85842 HIGH CVSS 7.83.1

Use of externally-controlled format string in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 29 Oct 2026 View details →
CVE-2026-85841 MEDIUM CVSS 6.63.1

Use after free in Windows DHCP Server allows an authorized attacker to execute code over a network.

Published: 13 Oct 2026 Updated: 29 Oct 2026 View details →
CVE-2026-85840 MEDIUM CVSS 6.53.1

Files or directories accessible to external parties in Windows Event Viewer allows an authorized attacker to disclose information over a network.

Published: 13 Oct 2026 Updated: 29 Oct 2026 View details →
CVE-2026-85834 HIGH CVSS 7.03.1

Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 29 Oct 2026 View details →
CVE-2026-85833 HIGH CVSS 7.83.1

Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 29 Oct 2026 View details →
CVE-2026-85832 HIGH CVSS 7.83.1

Heap-based buffer overflow in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 29 Oct 2026 View details →
CVE-2026-85831 MEDIUM CVSS 5.53.1

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to disclose information locally.

Published: 13 Oct 2026 Updated: 29 Oct 2026 View details →
CVE-2026-85830 MEDIUM CVSS 5.53.1

Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locally.

Published: 13 Oct 2026 Updated: 29 Oct 2026 View details →
CVE-2026-85829 HIGH CVSS 7.83.1

Double free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 29 Oct 2026 View details →
CVE-2026-85828 HIGH CVSS 7.03.1

Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 29 Oct 2026 View details →
CVE-2026-85827 HIGH CVSS 7.03.1

Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 06 Nov 2026 View details →
CVE-2026-85790 MEDIUM CVSS 5.93.1

Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network.

Published: 13 Oct 2026 Updated: 22 Oct 2026 View details →
CVE-2026-85369 HIGH CVSS 8.83.1

Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-85368 HIGH CVSS 7.83.1

Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-85367 HIGH CVSS 7.03.1

Use after free in Windows Cash Drawer Protocol Provider allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-85366 HIGH CVSS 7.83.1

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-85364 HIGH CVSS 7.03.1

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-85363 HIGH CVSS 8.83.1

Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to elevate privileges over a network.

Published: 13 Oct 2026 Updated: 22 Oct 2026 View details →
CVE-2026-85362 HIGH CVSS 7.03.1

Release of invalid pointer or reference in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-85361 HIGH CVSS 7.03.1

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-85359 HIGH CVSS 7.83.1

Improper control of generation of code ('code injection') in Windows Performance Monitor allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-85358 HIGH CVSS 7.83.1

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-85357 HIGH CVSS 7.03.1

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Phone Service allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →