CVE Database

40083+ vulnerabilities with CVSS scores, EPSS exploit predictions, and CISA KEV status. Updated daily.

Filter: All CRITICAL HIGH MEDIUM LOW CISA KEV
Sort: Newest CVSS EPSS
CVE-2026-50397
7.0 HIGH

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

Jul 14, 2026
CVE-2026-50396
7.0 HIGH

Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.

Jul 14, 2026
CVE-2026-50393
7.0 HIGH

Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.

Jul 14, 2026
CVE-2026-50392
7.0 HIGH

Use after free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.

Jul 14, 2026
CVE-2026-50391
7.8 HIGH

Improper privilege management in Windows Group Policy allows an authorized attacker to elevate privileges locally.

Jul 14, 2026
CVE-2026-50390
7.0 HIGH

Access of resource using incompatible type ('type confusion') in Windows Kernel allows an authorized attacker to elevate privileges locally.

Jul 14, 2026
CVE-2026-50388
7.8 HIGH

Out-of-bounds read in Windows NTFS allows an unauthorized attacker to execute code locally.

Jul 14, 2026
CVE-2026-50387
7.8 HIGH

Stack-based buffer overflow in Windows GDI allows an authorized attacker to elevate privileges locally.

Jul 14, 2026
CVE-2026-50386
7.8 HIGH

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.

Jul 14, 2026
CVE-2026-50385
8.8 HIGH

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an authorized attacker to elevate privileges locally.

Jul 14, 2026
CVE-2026-50382
8.8 HIGH

Untrusted pointer dereference in Windows DirectX allows an authorized attacker to execute code locally.

Jul 14, 2026
CVE-2026-50379
7.5 HIGH

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Media allows an authorized attacker to elevate privileges over a network.

Jul 14, 2026
CVE-2026-50378
7.8 HIGH

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Key Guard allows an authorized attacker to elevate privileges locally.

Jul 14, 2026
CVE-2026-50373
7.8 HIGH

Improper access control in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

Jul 14, 2026
CVE-2026-50372
7.0 HIGH

Buffer over-read in Windows Redirected Drive Buffering allows an authorized attacker to elevate privileges locally.

Jul 14, 2026
CVE-2026-50371
7.0 HIGH

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows LUAFV allows an authorized attacker to elevate privileges locally.

Jul 14, 2026
CVE-2026-50370
8.8 HIGH

Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over an adjacent network.

Jul 14, 2026
CVE-2026-50369
8.8 HIGH

Use after free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges over a network.

Jul 14, 2026
CVE-2026-50368
7.5 HIGH

Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network.

Jul 14, 2026
CVE-2026-50367
7.8 HIGH

Incorrect access of indexable resource ('range error') in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally.

Jul 14, 2026
CVE-2026-50365
8.0 HIGH

Improper authentication in Windows RPC API allows an unauthorized attacker to elevate privileges over an adjacent network.

Jul 14, 2026
CVE-2026-50363
7.8 HIGH

Heap-based buffer overflow in Windows Push Notifications allows an authorized attacker to elevate privileges locally.

Jul 14, 2026
CVE-2026-50362
7.8 HIGH

Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker to execute code locally.

Jul 14, 2026
CVE-2026-50361
7.8 HIGH

Double free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.

Jul 14, 2026
CVE-2026-50360
8.8 HIGH

Incorrect implementation of authentication algorithm in Windows SMB Server allows an authorized attacker to elevate privileges over a network.

Jul 14, 2026
CVE-2026-50359
7.0 HIGH

Use after free in Microsoft XML Core Services allows an authorized attacker to elevate privileges locally.

Jul 14, 2026
CVE-2026-50358
7.0 HIGH

Use after free in Windows Media allows an authorized attacker to elevate privileges locally.

Jul 14, 2026
CVE-2026-50357
7.8 HIGH

Numeric truncation error in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally.

Jul 14, 2026
CVE-2026-50355
7.5 HIGH

Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network.

Jul 14, 2026
CVE-2026-50353
7.8 HIGH

Use after free in Windows DirectX allows an authorized attacker to elevate privileges locally.

Jul 14, 2026
CVE-2026-50348
7.0 HIGH

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an unauthorized attacker to elevate privileges over a network.

Jul 14, 2026
CVE-2026-50347
7.8 HIGH

Heap-based buffer overflow in Windows Data dll allows an unauthorized attacker to execute code locally.

Jul 14, 2026
CVE-2026-50346
7.8 HIGH

Improper authorization in RPC Runtime allows an authorized attacker to elevate privileges locally.

Jul 14, 2026
CVE-2026-50345
7.0 HIGH

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an authorized attacker to elevate privileges locally.

Jul 14, 2026
CVE-2026-50344
7.8 HIGH

Improper authorization in Windows OLE allows an authorized attacker to elevate privileges locally.

Jul 14, 2026
CVE-2026-50343
7.8 HIGH

Improper privilege management in Microsoft Install Service allows an authorized attacker to elevate privileges locally.

Jul 14, 2026
CVE-2026-50340
8.5 HIGH

Use after free in Windows Runtime allows an authorized attacker to elevate privileges over a network.

Jul 14, 2026
CVE-2026-50337
7.8 HIGH

Incorrect type conversion or cast in Windows Notification allows an authorized attacker to elevate privileges locally.

Jul 14, 2026
CVE-2026-50336
7.8 HIGH

Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges locally.

Jul 14, 2026
CVE-2026-50335
7.8 HIGH

Improper access control in Windows Operating Systems allows an authorized attacker to elevate privileges locally.

Jul 14, 2026
CVE-2026-50332
7.8 HIGH

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

Jul 14, 2026
CVE-2026-50331
7.8 HIGH

Use after free in Windows Application Model allows an authorized attacker to elevate privileges locally.

Jul 14, 2026
CVE-2026-50330
7.5 HIGH

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to elevate privileges over a network.

Jul 14, 2026
CVE-2026-50329
7.8 HIGH

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

Jul 14, 2026
CVE-2026-50328
7.5 HIGH

Uncaught exception in Windows Server Update Service allows an unauthorized attacker to perform tampering over a network.

Jul 14, 2026
CVE-2026-50327
7.8 HIGH

Heap-based buffer overflow in Windows Media allows an authorized attacker to execute code locally.

Jul 14, 2026
CVE-2026-50326
7.8 HIGH

Use after free in Windows Unified Consent System allows an authorized attacker to elevate privileges locally.

Jul 14, 2026
CVE-2026-50322
7.0 HIGH

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an authorized attacker to elevate privileges locally.

Jul 14, 2026
CVE-2026-50321
7.8 HIGH

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Driver allows an authorized attacker to elevate privileges locally.

Jul 14, 2026
CVE-2026-50317
7.8 HIGH

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Operating Systems allows an authorized attacker to elevate privileges locally.

Jul 14, 2026

Scan your infrastructure for known CVEs

Free website and port scanning — find vulnerabilities before attackers do.