Vulnerability intelligence

Explore. Understand.
Stay ahead.

A clearer way to explore known software vulnerabilities. Search CVE records, review severity and CVSS scores, and keep track of the issues that matter to you.

Independent vulnerability information and monitoring project

Search the vulnerability database

Find a CVE by ID, keyword, severity or CVSS score.

Centralized CVE data
Browse vulnerability records collected from public sources.
Severity at a glance
Compare severity levels and available CVSS scores.
Personal email alerts
Create alert preferences for critical issues and custom matches.
Browse the database

Latest vulnerability records

52 918
matching records · page 722 of 2117
CVE-2026-70067 HIGH CVSS 7.03.1

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-70066 HIGH CVSS 7.03.1

Use after free in Windows DHCP Server allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-70064 HIGH CVSS 7.83.1

Integer underflow (wrap or wraparound) in Windows Kerberos allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-70063 MEDIUM CVSS 4.73.1

Out-of-bounds read in Windows Kernel allows an authorized attacker to disclose information locally.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-70062 HIGH CVSS 8.13.1

Double free in Windows Libarchive allows an unauthorized attacker to execute code over a network.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-70060 HIGH CVSS 7.83.1

Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-70059 HIGH CVSS 7.83.1

Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-70058 HIGH CVSS 7.53.1

Out-of-bounds write in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-70057 MEDIUM CVSS 5.53.1

Incorrect authorization in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to bypass a security feature locally.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-70056 HIGH CVSS 7.03.1

Use after free in Windows Update Service allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-70055 MEDIUM CVSS 5.53.1

Exposure of sensitive system information to an unauthorized control sphere in Windows Cryptographic Services allows an authorized attacker to disclose information locally.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-70054 HIGH CVSS 7.83.1

Heap-based buffer overflow in Windows NetBIOS allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-70052 HIGH CVSS 7.83.1

Integer overflow or wraparound in Windows PowerShell allows an authorized attacker to execute code locally.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-70051 HIGH CVSS 7.83.1

Access of resource using incompatible type ('type confusion') in Windows SmartScreen allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-70048 HIGH CVSS 7.83.1

Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-70035 HIGH CVSS 8.83.1

Deserialization of untrusted data in .NET Framework allows an unauthorized attacker to execute code over a network.

Published: 13 Oct 2026 Updated: 22 Oct 2026 View details →
CVE-2026-70013 HIGH CVSS 8.13.1

Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.

Published: 13 Oct 2026 Updated: 19 Oct 2026 View details →
CVE-2026-70012 HIGH CVSS 7.53.1

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

Published: 13 Oct 2026 Updated: 19 Oct 2026 View details →
CVE-2026-70011 MEDIUM CVSS 5.53.1

Out-of-bounds read in Windows IP Over USB Service allows an authorized attacker to disclose information locally.

Published: 13 Oct 2026 Updated: 26 Oct 2026 View details →
CVE-2026-70010 HIGH CVSS 7.83.1

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 26 Oct 2026 View details →
CVE-2026-70008 HIGH CVSS 7.83.1

Integer overflow or wraparound in Windows IP Over USB Service allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 26 Oct 2026 View details →
CVE-2026-70007 HIGH CVSS 8.83.1

Out-of-bounds write in .NET Framework allows an unauthorized attacker to execute code over a network.

Published: 13 Oct 2026 Updated: 22 Oct 2026 View details →
CVE-2026-70006 HIGH CVSS 7.53.1

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-70005 MEDIUM CVSS 5.93.1

Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to bypass a security feature over a network.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-70004 HIGH CVSS 7.53.1

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

Published: 13 Oct 2026 Updated: 19 Oct 2026 View details →