Vulnerability intelligence

Explore. Understand.
Stay ahead.

A clearer way to explore known software vulnerabilities. Search CVE records, review severity and CVSS scores, and keep track of the issues that matter to you.

Independent vulnerability information and monitoring project

Search the vulnerability database

Find a CVE by ID, keyword, severity or CVSS score.

Centralized CVE data
Browse vulnerability records collected from public sources.
Severity at a glance
Compare severity levels and available CVSS scores.
Personal email alerts
Create alert preferences for critical issues and custom matches.
Browse the database

Latest vulnerability records

52 919
matching records · page 729 of 2117
CVE-2026-102233 HIGH CVSS 7.83.1

Missing authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

Published: 13 Oct 2026 Updated: 10 Nov 2026 View details →
CVE-2026-102232 HIGH CVSS 7.03.1

Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

Published: 13 Oct 2026 Updated: 10 Nov 2026 View details →
CVE-2026-102231 HIGH CVSS 7.73.1

Improper resolution of path equivalence in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

Published: 13 Oct 2026 Updated: 10 Nov 2026 View details →
CVE-2026-102229 MEDIUM CVSS 6.83.1

Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an authorized attacker to disclose information over a network.

Published: 13 Oct 2026 Updated: 10 Nov 2026 View details →
CVE-2026-102227 HIGH CVSS 7.83.1

Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally.

Published: 13 Oct 2026 Updated: 26 Oct 2026 View details →
CVE-2026-102225 HIGH CVSS 8.83.1

Out-of-bounds read in Windows Text Shaping allows an unauthorized attacker to execute code over a network.

Published: 13 Oct 2026 Updated: 26 Oct 2026 View details →
CVE-2026-102221 MEDIUM CVSS 4.43.1

No cwe for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.

Published: 13 Oct 2026 Updated: 26 Oct 2026 View details →
CVE-2026-102220 HIGH CVSS 7.83.1

Use after free in Windows VHD miniport driver allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 26 Oct 2026 View details →
CVE-2026-102218 HIGH CVSS 7.83.1

Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 26 Oct 2026 View details →
CVE-2026-102217 HIGH CVSS 8.83.1

Improper resolution of path equivalence in WebDAV allows an authorized attacker to elevate privileges over a network.

Published: 13 Oct 2026 Updated: 21 Oct 2026 View details →
CVE-2026-102216 HIGH CVSS 7.83.1

Access of resource using incompatible type ('type confusion') in Windows StateRepository API allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 21 Oct 2026 View details →
CVE-2026-102215 HIGH CVSS 7.83.1

Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 21 Oct 2026 View details →
CVE-2026-102214 HIGH CVSS 8.83.1

Use after free in Windows Hyper-V allows an authorized attacker to execute code locally.

Published: 13 Oct 2026 Updated: 21 Oct 2026 View details →
CVE-2026-102211 HIGH CVSS 7.03.1

Use after free in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 20 Oct 2026 View details →
CVE-2026-102210 CRITICAL CVSS 9.83.1

Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.

Published: 13 Oct 2026 Updated: 20 Oct 2026 View details →
CVE-2026-102209 HIGH CVSS 7.03.1

Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 20 Oct 2026 View details →
CVE-2026-102208 HIGH CVSS 7.03.1

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 20 Oct 2026 View details →
CVE-2026-102207 HIGH CVSS 7.03.1

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 20 Oct 2026 View details →
CVE-2026-102206 MEDIUM CVSS 6.83.1

Heap-based buffer overflow in Windows Portable Device MTP Driver allows an unauthorized attacker to elevate privileges with a physical attack.

Published: 13 Oct 2026 Updated: 20 Oct 2026 View details →
CVE-2026-102205 HIGH CVSS 7.83.1

Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 20 Oct 2026 View details →
CVE-2026-102204 HIGH CVSS 7.83.1

Improper link resolution before file access ('link following') in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 20 Oct 2026 View details →
CVE-2026-102203 HIGH CVSS 8.83.1

Access of resource using incompatible type ('type confusion') in RPC Runtime allows an unauthorized attacker to execute code over a network.

Published: 13 Oct 2026 Updated: 20 Oct 2026 View details →
CVE-2026-102202 HIGH CVSS 7.83.1

Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 20 Oct 2026 View details →
CVE-2026-102201 HIGH CVSS 7.83.1

Use after free in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 20 Oct 2026 View details →
CVE-2026-102199 MEDIUM CVSS 6.53.1

Stack-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to deny service over a network.

Published: 13 Oct 2026 Updated: 20 Oct 2026 View details →