CVE Database

146333+ vulnerabilities with CVSS scores, EPSS exploit predictions, and CISA KEV status. Updated daily.

Filter: All CRITICAL HIGH MEDIUM LOW CISA KEV
Sort: Newest CVSS EPSS
CVE-2026-96113
9.8 CRITICAL

Heap-based buffer overflow in DNS Server allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-96108
7.8 HIGH

Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-96096
9.8 CRITICAL

Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-96071
7.5 HIGH

Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-96044
8.8 HIGH

No cwe for this issue in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

Oct 13, 2026
CVE-2026-95943
7.0 HIGH

Double free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-95904
5.5 MEDIUM

Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose information locally.

Oct 13, 2026
CVE-2026-95631
8.7 HIGH

Adobe Commerce is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An …

Oct 13, 2026
CVE-2026-95630
4.3 MEDIUM

Adobe Commerce is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability …

Oct 13, 2026
CVE-2026-94506
6.5 MEDIUM

Out-of-bounds read in Microsoft Office Access allows an unauthorized attacker to disclose information over a network.

Oct 13, 2026
CVE-2026-92922
8.1 HIGH

Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a high-privileged attacker to inject malicious scripts into vulnerable …

Oct 13, 2026
CVE-2026-92911
8.7 HIGH

Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable …

Oct 13, 2026
CVE-2026-92910
7.2 HIGH

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass …

Oct 13, 2026
CVE-2026-92909
9.8 CRITICAL

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker …

Oct 13, 2026
CVE-2026-92908
8.3 HIGH

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to …

Oct 13, 2026
CVE-2026-92464
9.1 CRITICAL

Adobe Commerce is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An …

Oct 13, 2026
CVE-2026-92088

Improper handling of undefined values vulnerability in upKeeper Solutions upKeeper Instant Privilege Access allows Privilege Escalation. This issue affects upKeeper Instant Privilege Access: through 1.7.1.

Oct 13, 2026
CVE-2026-91013
9.3 CRITICAL

Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form …

Oct 13, 2026
CVE-2026-88226
4.6 MEDIUM

Out-of-bounds read in Windows Storage Port Driver allows an unauthorized attacker to disclose information with a physical attack.

Oct 13, 2026
CVE-2026-88219
8.8 HIGH

Untrusted pointer dereference in RPC Runtime allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-88210
7.8 HIGH

Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally.

Oct 13, 2026
CVE-2026-88209
4.6 MEDIUM

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

Oct 13, 2026
CVE-2026-88208
4.6 MEDIUM

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

Oct 13, 2026
CVE-2026-88207
7.5 HIGH

Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-88206
7.5 HIGH

Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

Oct 13, 2026
CVE-2026-88204
7.3 HIGH

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

Oct 13, 2026
CVE-2026-88203
6.5 MEDIUM

Untrusted pointer dereference in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.

Oct 13, 2026
CVE-2026-88202
8.8 HIGH

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-88201
6.5 MEDIUM

Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

Oct 13, 2026
CVE-2026-88200
8.8 HIGH

Privilege context switching error in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

Oct 13, 2026
CVE-2026-88198
8.8 HIGH

Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

Oct 13, 2026
CVE-2026-88197
8.8 HIGH

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-88196
8.8 HIGH

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-88195
6.5 MEDIUM

Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

Oct 13, 2026
CVE-2026-88194
7.8 HIGH

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-88193
7.8 HIGH

Heap-based buffer overflow in Microsoft Scripting Engine allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-88192
6.5 MEDIUM

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

Oct 13, 2026
CVE-2026-88191
7.8 HIGH

Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-88190
6.5 MEDIUM

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

Oct 13, 2026
CVE-2026-88189
7.8 HIGH

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-88188
7.8 HIGH

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-88186
8.8 HIGH

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-88185
8.1 HIGH

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-88184
6.5 MEDIUM

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

Oct 13, 2026
CVE-2026-88183
6.5 MEDIUM

Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.

Oct 13, 2026
CVE-2026-88182
7.8 HIGH

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-88181
7.8 HIGH

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-88180
7.8 HIGH

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-88179
7.8 HIGH

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-88178
9.8 CRITICAL

Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.

Oct 13, 2026

Scan your infrastructure for known CVEs

Free website and port scanning — find vulnerabilities before attackers do.