CVE Vulnerability Database
Search and browse 424,094 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-97816 | CRITICAL | 9.8 | 0.9% | Oct 13, 2026 | Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97815 | CRITICAL | 9.8 | 0.7% | Oct 13, 2026 | Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97814 | CRITICAL | 9.8 | 1.0% | Oct 13, 2026 | Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97813 | MEDIUM | 6.5 | 1.0% | Oct 13, 2026 | Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to disclose information over a network. |
| CVE-2026-97812 | HIGH | 7 | 0.3% | Oct 13, 2026 | Double free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-97811 | HIGH | 7.8 | 0.2% | Oct 13, 2026 | Double free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally. |
| CVE-2026-97810 | HIGH | 7 | 0.3% | Oct 13, 2026 | Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker t... |
| CVE-2026-97809 | HIGH | 7.8 | 0.3% | Oct 13, 2026 | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-97808 | HIGH | 7 | 0.3% | Oct 13, 2026 | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-97807 | HIGH | 7.8 | 0.3% | Oct 13, 2026 | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-97806 | HIGH | 7.8 | 0.3% | Oct 13, 2026 | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-97805 | CRITICAL | 9.8 | 1.0% | Oct 13, 2026 | Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute code over a network... |
| CVE-2026-97804 | HIGH | 7.8 | 0.3% | Oct 13, 2026 | Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-97803 | HIGH | 7.8 | 0.3% | Oct 13, 2026 | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-97801 | HIGH | 7.5 | — | Oct 13, 2026 | Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to perform tampering ov... |
| CVE-2026-97800 | HIGH | 7.8 | 0.2% | Oct 13, 2026 | Incorrect permission assignment for critical resource in Windows Mobile Broadband allows an authorized attacker to eleva... |
| CVE-2026-97799 | HIGH | 7.8 | 0.3% | Oct 13, 2026 | Improper verification of cryptographic signature in Windows Audio Service allows an authorized attacker to elevate privi... |
| CVE-2026-97798 | HIGH | 7.8 | 0.8% | Oct 13, 2026 | Improper neutralization of argument delimiters in a command ('argument injection') in Windows Error Reporting allows an ... |
| CVE-2026-97794 | HIGH | 7.8 | 0.3% | Oct 13, 2026 | Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker t... |
| CVE-2026-97793 | HIGH | 7 | 0.2% | Oct 13, 2026 | Missing authentication for critical function in Windows Setup and Deployment allows an authorized attacker to elevate pr... |
| CVE-2026-97792 | HIGH | 7.8 | 0.3% | Oct 13, 2026 | Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to e... |
| CVE-2026-97790 | MEDIUM | 5.5 | 0.4% | Oct 13, 2026 | Improper link resolution before file access ('link following') in Windows Container Isolation FS Filter Driver (unionfs.... |
| CVE-2026-97789 | HIGH | 7.5 | 0.6% | Oct 13, 2026 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97788 | HIGH | 7.5 | 0.7% | Oct 13, 2026 | Observable discrepancy in Active Directory Federation Services (AD FS) allows an unauthorized attacker to disclose infor... |
| CVE-2026-97787 | HIGH | 7 | 0.2% | Oct 13, 2026 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Container Isolati... |