CVE Database

151104+ vulnerabilities with CVSS scores, EPSS exploit predictions, and CISA KEV status. Updated daily.

Filter: All CRITICAL HIGH MEDIUM LOW CISA KEV
Sort: Newest CVSS EPSS
CVE-2026-70065
7.5 HIGH

Missing release of memory after effective lifetime in Windows DHCP Server allows an unauthorized attacker to deny service over a network.

Sep 8, 2026
CVE-2026-70019
6.5 MEDIUM

Windows hard link in Windows Compressed Folder allows an unauthorized attacker to disclose information over a network.

Sep 8, 2026
CVE-2026-69989
8.1 HIGH

Use after free in DNS Server allows an unauthorized attacker to execute code over a network.

Sep 8, 2026
CVE-2026-69930
5.9 MEDIUM

Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to disclose information over a network.

Sep 8, 2026
CVE-2026-69929
5.9 MEDIUM

Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to disclose information over a network.

Sep 8, 2026
CVE-2026-69921
7.8 HIGH

Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-69911
7.0 HIGH

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-69910
9.8 CRITICAL

Stack-based buffer overflow in Windows Hyper-V allows an unauthorized attacker to execute code over a network.

Sep 8, 2026
CVE-2026-69907
7.8 HIGH

Improper handling of insufficient permissions or privileges in Windows Enterprise App Management allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-69906
8.2 HIGH

Heap-based buffer overflow in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-69904
3.5 LOW

Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

Sep 8, 2026
CVE-2026-69900
7.8 HIGH

Untrusted pointer dereference in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-69896
7.0 HIGH

Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-69895
4.7 MEDIUM

Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information locally.

Sep 8, 2026
CVE-2026-69891
7.0 HIGH

Use after free in Windows Media allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-69890
7.5 HIGH

Use after free in Windows Virtual Trusted Platform Module allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-69889
7.0 HIGH

Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-69881
7.5 HIGH

Null pointer dereference in Windows IKE Extension allows an unauthorized attacker to deny service over a network.

Sep 8, 2026
CVE-2026-69878
6.4 MEDIUM

Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code locally.

Sep 8, 2026
CVE-2026-69876
8.0 HIGH

Use after free in Windows DHCP Server allows an authorized attacker to execute code over an adjacent network.

Sep 8, 2026
CVE-2026-69875
8.0 HIGH

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network.

Sep 8, 2026
CVE-2026-69874
8.2 HIGH

Untrusted pointer dereference in Windows ALPC allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-69866
7.0 HIGH

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-69864
7.8 HIGH

Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-69862
5.5 MEDIUM

Out-of-bounds read in Windows Wireless Wide Area Network Service allows an authorized attacker to disclose information locally.

Sep 8, 2026
CVE-2026-69860
8.8 HIGH

Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.

Sep 8, 2026
CVE-2026-69859
7.0 HIGH

Time-of-check time-of-use (toctou) race condition in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-69858
8.1 HIGH

Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.

Sep 8, 2026
CVE-2026-69854
9.0 CRITICAL

Improper authentication in Spring Cloud Azure allows an unauthorized attacker to elevate privileges over a network.

Sep 8, 2026
CVE-2026-69853
4.7 MEDIUM

Use of uninitialized resource in Windows Win32K allows an authorized attacker to disclose information locally.

Sep 8, 2026
CVE-2026-69852
7.5 HIGH

Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine

Sep 8, 2026
CVE-2026-69847
8.0 HIGH

Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over an adjacent network.

Sep 8, 2026
CVE-2026-69846
8.2 HIGH

Integer overflow or wraparound in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-69845
9.8 CRITICAL

Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

Sep 8, 2026
CVE-2026-69844
7.8 HIGH

Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-69841
7.8 HIGH

Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-69839
6.5 MEDIUM

Uncaught exception in Windows iSCSI Target Service allows an authorized attacker to deny service over a network.

Sep 8, 2026
CVE-2026-69838
7.0 HIGH

Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-69834
7.0 HIGH

Use after free in Windows ALPC allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-69832
5.6 MEDIUM

Exposure of sensitive system information to an unauthorized control sphere in Windows Win32K allows an authorized attacker to disclose information locally.

Sep 8, 2026
CVE-2026-69829
9.8 CRITICAL

Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network.

Sep 8, 2026
CVE-2026-69827
8.1 HIGH

Concurrent execution using shared resource with improper synchronization ('race condition') in DNS Server allows an unauthorized attacker to execute code over a network.

Sep 8, 2026
CVE-2026-69826
8.0 HIGH

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges over a network.

Sep 8, 2026
CVE-2026-69824
9.8 CRITICAL

Integer underflow (wrap or wraparound) in Microsoft Standard XPS allows an unauthorized attacker to execute code over a network.

Sep 8, 2026
CVE-2026-69822
7.8 HIGH

Numeric truncation error in Windows Kerberos allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-69821
7.8 HIGH

Improper encoding or escaping of output in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-69820
8.2 HIGH

Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-69819
9.8 CRITICAL

Out-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code over a network.

Sep 8, 2026
CVE-2026-69818
7.0 HIGH

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-69817
7.0 HIGH

Use after free in Windows Bluetooth Port Driver allows an authorized attacker to elevate privileges locally.

Sep 8, 2026

Scan your infrastructure for known CVEs

Free website and port scanning — find vulnerabilities before attackers do.