Vulnerability intelligence

Explore. Understand.
Stay ahead.

A clearer way to explore known software vulnerabilities. Search CVE records, review severity and CVSS scores, and keep track of the issues that matter to you.

Independent vulnerability information and monitoring project

Search the vulnerability database

Find a CVE by ID, keyword, severity or CVSS score.

Centralized CVE data
Browse vulnerability records collected from public sources.
Severity at a glance
Compare severity levels and available CVSS scores.
Personal email alerts
Create alert preferences for critical issues and custom matches.
Browse the database

Latest vulnerability records

52 907
matching records · page 703 of 2117
CVE-2026-85356 HIGH CVSS 7.83.1

Out-of-bounds read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-85355 HIGH CVSS 7.03.1

Inclusion of functionality from untrusted control sphere in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-85354 HIGH CVSS 7.03.1

Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-85353 HIGH CVSS 7.53.1

Out-of-bounds read in Windows Print Spooler Components allows an unauthorized attacker to disclose information over a network.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-85352 HIGH CVSS 7.03.1

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-85343 HIGH CVSS 7.83.1

Improper link resolution before file access ('link following') in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-85342 HIGH CVSS 7.03.1

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-85341 HIGH CVSS 7.83.1

Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-85339 HIGH CVSS 8.83.1

Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-85321 HIGH CVSS 7.53.1

Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.

Published: 13 Oct 2026 Updated: 29 Oct 2026 View details →
CVE-2026-85320 MEDIUM CVSS 5.53.1

Use of uninitialized resource in Windows Print Spooler Components allows an authorized attacker to disclose information locally.

Published: 13 Oct 2026 Updated: 29 Oct 2026 View details →
CVE-2026-85319 HIGH CVSS 7.53.1

Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.

Published: 13 Oct 2026 Updated: 29 Oct 2026 View details →
CVE-2026-85318 HIGH CVSS 7.83.1

Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 29 Oct 2026 View details →
CVE-2026-84020 HIGH CVSS 7.03.1

Use after free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 19 Oct 2026 View details →
CVE-2026-84019 HIGH CVSS 7.03.1

Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 19 Oct 2026 View details →
CVE-2026-84018 HIGH CVSS 7.03.1

Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 19 Oct 2026 View details →
CVE-2026-84017 HIGH CVSS 7.53.1

Null pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network.

Published: 13 Oct 2026 Updated: 19 Oct 2026 View details →
CVE-2026-84016 HIGH CVSS 7.83.1

Out-of-bounds write in Windows EAPHost Service allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 19 Oct 2026 View details →
CVE-2026-84015 CRITICAL CVSS 9.83.1

Heap-based buffer overflow in Remote Access Point-to-Point Protocol (PPP) EAP-TLS allows an unauthorized attacker to execute code over a network.

Published: 13 Oct 2026 Updated: 19 Oct 2026 View details →
CVE-2026-84014 HIGH CVSS 7.03.1

Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 19 Oct 2026 View details →
CVE-2026-84013 HIGH CVSS 7.83.1

Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 19 Oct 2026 View details →
CVE-2026-84012 HIGH CVSS 8.13.1

Double free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.

Published: 13 Oct 2026 Updated: 19 Oct 2026 View details →
CVE-2026-84011 MEDIUM CVSS 5.53.1

Incorrect authorization in Windows SMB Client allows an authorized attacker to bypass a security feature locally.

Published: 13 Oct 2026 Updated: 19 Oct 2026 View details →
CVE-2026-84009 MEDIUM CVSS 4.73.1

Time-of-check time-of-use (toctou) race condition in Windows Projected File System allows an authorized attacker to perform tampering locally.

Published: 13 Oct 2026 Updated: 19 Oct 2026 View details →
CVE-2026-84008 HIGH CVSS 7.53.1

Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.

Published: 13 Oct 2026 Updated: 22 Oct 2026 View details →