Search Results (22127 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-88093 1 Microsoft 20 Windows 10 1809, Windows 10 21h2, Windows 10 21h2 and 17 more 2026-10-18 7.8 High
Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
CVE-2026-83776 1 Microsoft 23 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 20 more 2026-10-18 6.8 Medium
Out-of-bounds read in Microsoft Bluetooth Driver allows an unauthorized attacker to elevate privileges with a physical attack.
CVE-2026-83779 1 Microsoft 28 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 25 more 2026-10-18 7.8 High
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-83780 1 Microsoft 9 Windows 10 1607, Windows 10 1809, Windows Server 2016 and 6 more 2026-10-18 9.8 Critical
Use after free in Windows CCFFilter Driver allows an unauthorized attacker to execute code over a network.
CVE-2026-83778 1 Microsoft 28 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 25 more 2026-10-18 8.8 High
Heap-based buffer overflow in Microsoft Internet Messaging API allows an unauthorized attacker to execute code over a network.
CVE-2026-70041 1 Microsoft 28 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 25 more 2026-10-18 5.5 Medium
Buffer over-read in Windows CD-ROM Driver allows an authorized attacker to disclose information locally.
CVE-2026-69959 1 Microsoft 28 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 25 more 2026-10-18 7.8 High
Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to execute code locally.
CVE-2026-69902 1 Microsoft 28 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 25 more 2026-10-18 6.7 Medium
Untrusted pointer dereference in Windows NTFS allows an authorized attacker to execute code locally.
CVE-2026-70127 1 Microsoft 14 Windows 10 1607, Windows 10 1809, Windows Server 2012 and 11 more 2026-10-18 8.1 High
Use after free in DNS Server allows an unauthorized attacker to execute code over a network.
CVE-2026-96186 1 Microsoft 28 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 25 more 2026-10-18 7.8 High
Deserialization of untrusted data in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally.
CVE-2026-87715 1 Microsoft 28 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 25 more 2026-10-18 7 High
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-70155 1 Microsoft 14 Windows 10 1607, Windows 10 1809, Windows Server 2012 and 11 more 2026-10-18 7.5 High
Missing release of memory after effective lifetime in Windows DNS allows an unauthorized attacker to deny service over a network.
CVE-2026-70087 1 Microsoft 14 Windows 10 1607, Windows 10 1809, Windows Server 2012 and 11 more 2026-10-18 5.5 Medium
Incorrect authorization in DNS Server allows an authorized attacker to bypass a security feature locally.
CVE-2026-69721 1 Microsoft 28 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 25 more 2026-10-18 5.5 Medium
Out-of-bounds read in Windows iSCSI allows an authorized attacker to disclose information locally.
CVE-2026-69867 2 Microsoft, Sqlite 24 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 21 more 2026-10-18 7.8 High
Out-of-bounds read in SQLite allows an authorized attacker to elevate privileges locally.
CVE-2026-69905 1 Microsoft 20 Windows 10 1809, Windows 10 21h2, Windows 10 21h2 and 17 more 2026-10-18 5.5 Medium
Missing authorization in Windows AppX Deployment Service allows an authorized attacker to perform tampering locally.
CVE-2026-70045 1 Microsoft 19 Windows 10 1809, Windows 10 21h2, Windows 10 21h2 and 16 more 2026-10-18 7 High
Use after free in Windows Work Folders allows an authorized attacker to elevate privileges locally.
CVE-2026-70044 1 Microsoft 28 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 25 more 2026-10-18 5.5 Medium
Out-of-bounds read in Microsoft Windows Media Foundation allows an unauthorized attacker to disclose information locally.
CVE-2026-83889 1 Microsoft 28 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 25 more 2026-10-18 8.8 High
Release of invalid pointer or reference in DNS Server allows an authorized attacker to execute code over a network.
CVE-2026-70071 1 Microsoft 14 Windows 10 1607, Windows 10 1809, Windows Server 2012 and 11 more 2026-10-17 5.5 Medium
Improper verification of cryptographic signature in DNS Server allows an authorized attacker to perform tampering locally.