CVE Database

13351+ vulnerabilities with CVSS scores, EPSS exploit predictions, and CISA KEV status. Updated daily.

Filter: All CRITICAL HIGH MEDIUM LOW CISA KEV
Sort: Newest CVSS EPSS
CVE-2026-97816
9.8 CRITICAL

Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-97815
9.8 CRITICAL

Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-97814
9.8 CRITICAL

Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-97805
9.8 CRITICAL

Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-97749
9.8 CRITICAL

Double free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-97016
9.8 CRITICAL

Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-96934
9.8 CRITICAL

Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-96924
9.8 CRITICAL

Untrusted pointer dereference in Windows OLE allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-96909
9.8 CRITICAL

Heap-based buffer overflow in Windows BitLocker allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-96864
9.8 CRITICAL

Double free in Microsoft Failover Cluster Virtual Driver allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-96320
9.8 CRITICAL

Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-96252
9.1 CRITICAL

Improper verification of cryptographic signature in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.

Oct 13, 2026
CVE-2026-96219
9.8 CRITICAL

Out-of-bounds write in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-96113
9.8 CRITICAL

Heap-based buffer overflow in DNS Server allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-96096
9.8 CRITICAL

Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-92909
9.8 CRITICAL

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker …

Oct 13, 2026
CVE-2026-92464
9.1 CRITICAL

Adobe Commerce is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An …

Oct 13, 2026
CVE-2026-91013
9.3 CRITICAL

Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form …

Oct 13, 2026
CVE-2026-88178
9.8 CRITICAL

Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-88156
9.8 CRITICAL

Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-88102
9.8 CRITICAL

Use after free in Windows Failover Cluster allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-88092
9.4 CRITICAL

Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to perform tampering over a network.

Oct 13, 2026
CVE-2026-85928
9.8 CRITICAL

Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-85818
9.0 CRITICAL

Improper verification of cryptographic signature in Windows Schannel allows an unauthorized attacker to perform spoofing over a network.

Oct 13, 2026
CVE-2026-85814
9.8 CRITICAL

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-85809
9.8 CRITICAL

Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine

Oct 13, 2026
CVE-2026-85806
9.8 CRITICAL

Integer underflow (wrap or wraparound) in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-85792
9.8 CRITICAL

Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine

Oct 13, 2026
CVE-2026-84015
9.8 CRITICAL

Heap-based buffer overflow in Remote Access Point-to-Point Protocol (PPP) EAP-TLS allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-83935
9.8 CRITICAL

Heap-based buffer overflow in Microsoft XML allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-83910
9.8 CRITICAL

Out-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-83869
9.8 CRITICAL

Integer underflow (wrap or wraparound) in DNS Server allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-83862
9.8 CRITICAL

Use after free in Windows Network Load Balancing allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-83782
9.8 CRITICAL

Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-83780
9.8 CRITICAL

Use after free in Windows CCFFilter Driver allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-83770
9.8 CRITICAL

Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-83748
9.8 CRITICAL

Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-83693
9.8 CRITICAL

Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-83578
9.8 CRITICAL

Integer underflow (wrap or wraparound) in Windows PowerShell allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-83519
9.8 CRITICAL

Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-83517
9.8 CRITICAL

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-70300
9.8 CRITICAL

Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-70291
9.8 CRITICAL

Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-70279
9.3 CRITICAL

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.

Oct 13, 2026
CVE-2026-70242
9.8 CRITICAL

Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-70188
9.1 CRITICAL

Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network.

Oct 13, 2026
CVE-2026-70157
9.8 CRITICAL

Heap-based buffer overflow in Windows System Information Console allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-70153
9.8 CRITICAL

Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-70147
9.8 CRITICAL

Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-70096
9.8 CRITICAL

Heap-based buffer overflow in Windows Rich Text Edit Control allows an unauthorized attacker to execute code over a network.

Oct 13, 2026

Scan your infrastructure for known CVEs

Free website and port scanning — find vulnerabilities before attackers do.