CVE Database

146333+ vulnerabilities with CVSS scores, EPSS exploit predictions, and CISA KEV status. Updated daily.

Filter: All CRITICAL HIGH MEDIUM LOW CISA KEV
Sort: Newest CVSS EPSS
CVE-2026-85872
7.8 HIGH

Use after free in Windows Storage VSP Driver allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-85871
7.8 HIGH

Heap-based buffer overflow in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-85870
7.0 HIGH

Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-85869
7.8 HIGH

Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-85868
7.0 HIGH

Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-85867
7.8 HIGH

Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-85866
4.7 MEDIUM

Exposure of sensitive system information to an unauthorized control sphere in Windows ALPC allows an authorized attacker to disclose information locally.

Oct 13, 2026
CVE-2026-85865
5.5 MEDIUM

Improper authentication in Windows DHCP Server allows an authorized attacker to bypass a security feature locally.

Oct 13, 2026
CVE-2026-85864
7.8 HIGH

Improper privilege management in Python allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-85863
7.8 HIGH

Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-85861
7.8 HIGH

Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-85860
7.8 HIGH

Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-85859
6.5 MEDIUM

Null pointer dereference in Windows Message Queuing Queue Manager allows an authorized attacker to deny service over a network.

Oct 13, 2026
CVE-2026-85858
7.8 HIGH

Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-85857
5.5 MEDIUM

Insertion of sensitive information into log file in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.

Oct 13, 2026
CVE-2026-85856
7.1 HIGH

Heap-based buffer overflow in Windows Internet Connection Sharing (ICS) allows an authorized attacker to execute code over an adjacent network.

Oct 13, 2026
CVE-2026-85855
7.0 HIGH

Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-85854
7.0 HIGH

Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-85853
7.0 HIGH

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-85852
5.5 MEDIUM

Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.

Oct 13, 2026
CVE-2026-85851
7.8 HIGH

Use after free in Windows SmartScreen allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-85850
7.8 HIGH

Release of invalid pointer or reference in Windows Kernel allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-85849
7.8 HIGH

Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-85848
7.8 HIGH

Heap-based buffer overflow in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-85847
6.5 MEDIUM

Out-of-bounds read in Windows Print Spooler Components allows an unauthorized attacker to disclose information over a network.

Oct 13, 2026
CVE-2026-85846
7.0 HIGH

Use after free in Windows Web Account Manager allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-85843
7.8 HIGH

Use of uninitialized resource in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-85842
7.8 HIGH

Use of externally-controlled format string in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-85841
6.6 MEDIUM

Use after free in Windows DHCP Server allows an authorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-85840
6.5 MEDIUM

Files or directories accessible to external parties in Windows Event Viewer allows an authorized attacker to disclose information over a network.

Oct 13, 2026
CVE-2026-85837
7.8 HIGH

Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-85836
7.8 HIGH

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-85835
5.5 MEDIUM

Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally.

Oct 13, 2026
CVE-2026-85834
7.0 HIGH

Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-85833
7.8 HIGH

Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-85832
7.8 HIGH

Heap-based buffer overflow in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-85831
5.5 MEDIUM

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to disclose information locally.

Oct 13, 2026
CVE-2026-85830
5.5 MEDIUM

Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locally.

Oct 13, 2026
CVE-2026-85829
7.8 HIGH

Double free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-85828
7.0 HIGH

Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-85827
7.0 HIGH

Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-85826
7.0 HIGH

Out-of-bounds write in Windows Fast FAT Driver allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-85825
7.0 HIGH

Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-85824
7.0 HIGH

Use after free in Windows Composite Image File System allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-85823
7.0 HIGH

Use after free in Windows Composite Image File System allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-85822
7.8 HIGH

Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-85821
6.5 MEDIUM

Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally.

Oct 13, 2026
CVE-2026-85820
7.8 HIGH

Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-85818
9.0 CRITICAL

Improper verification of cryptographic signature in Windows Schannel allows an unauthorized attacker to perform spoofing over a network.

Oct 13, 2026
CVE-2026-85817
8.8 HIGH

Reliance on untrusted inputs in a security decision in Windows PowerShell allows an unauthorized attacker to execute code over a network.

Oct 13, 2026

Scan your infrastructure for known CVEs

Free website and port scanning — find vulnerabilities before attackers do.