CVE Database

48241+ vulnerabilities with CVSS scores, EPSS exploit predictions, and CISA KEV status. Updated daily.

Filter: All CRITICAL HIGH MEDIUM LOW CISA KEV
Sort: Newest CVSS EPSS
CVE-2026-73011
7.8 HIGH

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-73007
7.8 HIGH

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-73006
8.8 HIGH

Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.

Sep 8, 2026
CVE-2026-73005
7.0 HIGH

Use after free in Windows Authentication Methods allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-73003
7.0 HIGH

Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-73002
7.8 HIGH

Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-73001
7.8 HIGH

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-73000
7.8 HIGH

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-72997
7.8 HIGH

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-72996
7.8 HIGH

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-72995
7.8 HIGH

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-72994
7.8 HIGH

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-72993
7.8 HIGH

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-72992
7.8 HIGH

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-72991
7.8 HIGH

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-72990
7.8 HIGH

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-72989
7.5 HIGH

Use of uninitialized resource in Windows Failover Cluster allows an unauthorized attacker to disclose information over a network.

Sep 8, 2026
CVE-2026-72988
7.8 HIGH

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-72987
8.1 HIGH

Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.

Sep 8, 2026
CVE-2026-72986
8.8 HIGH

Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.

Sep 8, 2026
CVE-2026-72981
8.1 HIGH

Use after free in IP Helper allows an unauthorized attacker to execute code over a network.

Sep 8, 2026
CVE-2026-72973
8.8 HIGH

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Sep 8, 2026
CVE-2026-72972
8.8 HIGH

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Sep 8, 2026
CVE-2026-72967
7.8 HIGH

Heap-based buffer overflow in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-72965
7.8 HIGH

Use after free in Windows WebClient Service allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-72963
7.0 HIGH

Use after free in Windows Modern Execution Server allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-72962
8.2 HIGH

Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-72961
8.2 HIGH

Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-72960
8.8 HIGH

Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network.

Sep 8, 2026
CVE-2026-72959
8.8 HIGH

Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine

Sep 8, 2026
CVE-2026-72958
8.2 HIGH

Double free in Windows Credential Guard allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-72957
7.8 HIGH

Heap-based buffer overflow in Windows Deployment Services allows an authorized attacker to execute code locally.

Sep 8, 2026
CVE-2026-72954
7.5 HIGH

Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network.

Sep 8, 2026
CVE-2026-72953
7.8 HIGH

Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-72952
7.0 HIGH

Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to execute code locally.

Sep 8, 2026
CVE-2026-72950
8.8 HIGH

Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine

Sep 8, 2026
CVE-2026-72949
7.5 HIGH

Null pointer dereference in Windows SMB Server Network Transport Driver (srvnet.sys) allows an unauthorized attacker to deny service over a network.

Sep 8, 2026
CVE-2026-72946
7.8 HIGH

Heap-based buffer overflow in Storage Port Driver allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-72944
7.8 HIGH

Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-72943
7.5 HIGH

Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network.

Sep 8, 2026
CVE-2026-72941
7.8 HIGH

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-72940
8.8 HIGH

Heap-based buffer overflow in Windows Schannel allows an unauthorized attacker to execute code over a network.

Sep 8, 2026
CVE-2026-72936
8.1 HIGH

Use after free in Windows SMB Client allows an unauthorized attacker to execute code over a network.

Sep 8, 2026
CVE-2026-72933
8.8 HIGH

Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network.

Sep 8, 2026
CVE-2026-72932
7.5 HIGH

Buffer over-read in Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose information over a network.

Sep 8, 2026
CVE-2026-72930
7.0 HIGH

Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to execute code locally.

Sep 8, 2026
CVE-2026-72929
7.8 HIGH

Improper validation of integrity check value in Windows Installer allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-72928
7.5 HIGH

Use after free in Windows DNS allows an authorized attacker to execute code over a network.

Sep 8, 2026
CVE-2026-72926
7.0 HIGH

Use after free in Windows Internet Connection Sharing (ICS) allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-72923
7.5 HIGH

In Microsoft.OpenApi.YamlReader from 2.0.0-preview.11 until 2.12.0 and from 3.0.0 until 3.10.0, and in Microsoft.OpenApi.Readers prior to 1.6.30, a small YAML OpenAPI document containing nested anchors …

Sep 8, 2026

Scan your infrastructure for known CVEs

Free website and port scanning — find vulnerabilities before attackers do.