CVE Database

146333+ vulnerabilities with CVSS scores, EPSS exploit predictions, and CISA KEV status. Updated daily.

Filter: All CRITICAL HIGH MEDIUM LOW CISA KEV
Sort: Newest CVSS EPSS
CVE-2026-102235
8.8 HIGH

Improper encoding or escaping of output in Visual Studio Code allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-102234
7.4 HIGH

Reliance on untrusted inputs in a security decision in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.

Oct 13, 2026
CVE-2026-97844
6.5 MEDIUM

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

Oct 13, 2026
CVE-2026-97843
6.5 MEDIUM

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

Oct 13, 2026
CVE-2026-97842
6.5 MEDIUM

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

Oct 13, 2026
CVE-2026-97841
6.5 MEDIUM

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

Oct 13, 2026
CVE-2026-97840
6.5 MEDIUM

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

Oct 13, 2026
CVE-2026-97839
6.5 MEDIUM

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

Oct 13, 2026
CVE-2026-97838
6.5 MEDIUM

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

Oct 13, 2026
CVE-2026-97837
6.5 MEDIUM

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

Oct 13, 2026
CVE-2026-97836
6.5 MEDIUM

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

Oct 13, 2026
CVE-2026-97835
6.5 MEDIUM

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

Oct 13, 2026
CVE-2026-97834
6.5 MEDIUM

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

Oct 13, 2026
CVE-2026-97833
6.5 MEDIUM

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

Oct 13, 2026
CVE-2026-97832
6.5 MEDIUM

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

Oct 13, 2026
CVE-2026-97831
6.5 MEDIUM

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

Oct 13, 2026
CVE-2026-97830
7.5 HIGH

Double free in Windows Internet Information Services allows an unauthorized attacker to deny service over a network.

Oct 13, 2026
CVE-2026-97829
6.5 MEDIUM

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

Oct 13, 2026
CVE-2026-97828
6.5 MEDIUM

Buffer over-read in DNS Server allows an authorized attacker to disclose information over a network.

Oct 13, 2026
CVE-2026-97827
6.5 MEDIUM

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

Oct 13, 2026
CVE-2026-97826
6.5 MEDIUM

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

Oct 13, 2026
CVE-2026-97825
6.5 MEDIUM

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

Oct 13, 2026
CVE-2026-97824
6.5 MEDIUM

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

Oct 13, 2026
CVE-2026-97823
6.5 MEDIUM

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

Oct 13, 2026
CVE-2026-97822
6.5 MEDIUM

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

Oct 13, 2026
CVE-2026-97821
6.5 MEDIUM

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

Oct 13, 2026
CVE-2026-97820
6.5 MEDIUM

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

Oct 13, 2026
CVE-2026-97819
6.5 MEDIUM

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

Oct 13, 2026
CVE-2026-97817
6.5 MEDIUM

Heap-based buffer overflow in DNS Server allows an authorized attacker to disclose information over a network.

Oct 13, 2026
CVE-2026-97816
9.8 CRITICAL

Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-97815
9.8 CRITICAL

Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-97814
9.8 CRITICAL

Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-97813
6.5 MEDIUM

Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to disclose information over a network.

Oct 13, 2026
CVE-2026-97812
7.0 HIGH

Double free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-97811
7.8 HIGH

Double free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-97810
7.0 HIGH

Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-97809
7.8 HIGH

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-97808
7.0 HIGH

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-97807
7.8 HIGH

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-97806
7.8 HIGH

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-97805
9.8 CRITICAL

Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-97804
7.8 HIGH

Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-97803
7.8 HIGH

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-97801
7.5 HIGH

Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to perform tampering over a network.

Oct 13, 2026
CVE-2026-97800
7.8 HIGH

Incorrect permission assignment for critical resource in Windows Mobile Broadband allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-97799
7.8 HIGH

Improper verification of cryptographic signature in Windows Audio Service allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-97798
7.8 HIGH

Improper neutralization of argument delimiters in a command ('argument injection') in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-97794
7.8 HIGH

Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-97793
7.0 HIGH

Missing authentication for critical function in Windows Setup and Deployment allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-97792
7.8 HIGH

Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.

Oct 13, 2026

Scan your infrastructure for known CVEs

Free website and port scanning — find vulnerabilities before attackers do.