CVE Vulnerability Database
Search and browse 424,124 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-96918 | HIGH | 7.8 | 0.3% | Oct 13, 2026 | Improper access control in Windows NTFS allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96917 | HIGH | 8.8 | 0.3% | Oct 13, 2026 | Heap-based buffer overflow in Windows PCI Bus Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96916 | HIGH | 7.8 | 0.3% | Oct 13, 2026 | Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96915 | HIGH | 7.8 | 0.2% | Oct 13, 2026 | Integer overflow or wraparound in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locall... |
| CVE-2026-96914 | HIGH | 8.8 | 0.3% | Oct 13, 2026 | Integer overflow or wraparound in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to e... |
| CVE-2026-96913 | HIGH | 7.8 | 0.3% | Oct 13, 2026 | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96912 | HIGH | 7.8 | 0.3% | Oct 13, 2026 | Use after free in Windows Client License Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96911 | HIGH | 7.8 | 0.4% | Oct 13, 2026 | Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorize... |
| CVE-2026-96910 | MEDIUM | 5.5 | 0.4% | Oct 13, 2026 | Untrusted pointer dereference in Microsoft Windows Search Component allows an authorized attacker to disclose informatio... |
| CVE-2026-96909 | CRITICAL | 9.8 | 0.9% | Oct 13, 2026 | Heap-based buffer overflow in Windows BitLocker allows an unauthorized attacker to execute code over a network. |
| CVE-2026-96868 | HIGH | 7 | 0.3% | Oct 13, 2026 | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96867 | HIGH | 7.8 | 0.3% | Oct 13, 2026 | Out-of-bounds read in Windows NTFS allows an authorized attacker to execute code locally. |
| CVE-2026-96866 | HIGH | 7.5 | 1.1% | Oct 13, 2026 | Out-of-bounds read in Network Device Enrollment Service (NDES) allows an unauthorized attacker to deny service over a ne... |
| CVE-2026-96865 | MEDIUM | 5.6 | 0.4% | Oct 13, 2026 | Exposure of sensitive system information to an unauthorized control sphere in Windows Secure Kernel Mode allows an autho... |
| CVE-2026-96864 | CRITICAL | 9.8 | 0.6% | Oct 13, 2026 | Double free in Microsoft Failover Cluster Virtual Driver allows an unauthorized attacker to execute code over a network. |
| CVE-2026-96863 | MEDIUM | 6.8 | 0.3% | Oct 13, 2026 | Heap-based buffer overflow in Windows Storage Port Driver allows an unauthorized attacker to elevate privileges with a p... |
| CVE-2026-96862 | HIGH | 7.8 | 0.3% | Oct 13, 2026 | Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96861 | HIGH | 7.5 | 1.1% | Oct 13, 2026 | Out-of-bounds read in Network Device Enrollment Service (NDES) allows an unauthorized attacker to deny service over a ne... |
| CVE-2026-96860 | MEDIUM | 5.5 | 0.4% | Oct 13, 2026 | Out-of-bounds read in Windows USB Print Driver allows an authorized attacker to disclose information locally. |
| CVE-2026-96859 | MEDIUM | 5.5 | 0.4% | Oct 13, 2026 | Out-of-bounds read in Windows Imaging Component allows an authorized attacker to disclose information locally. |
| CVE-2026-96858 | MEDIUM | 5.5 | 0.5% | Oct 13, 2026 | Missing authentication for critical function in Windows Security Account Manager allows an authorized attacker to perfor... |
| CVE-2026-96857 | MEDIUM | 5.5 | 0.4% | Oct 13, 2026 | Files or directories accessible to external parties in Windows Projected File System allows an authorized attacker to di... |
| CVE-2026-96856 | HIGH | 7.8 | 0.3% | Oct 13, 2026 | Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges loc... |
| CVE-2026-96855 | MEDIUM | 5.5 | 0.3% | Oct 13, 2026 | Improper access control in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering loc... |
| CVE-2026-96854 | MEDIUM | 5.5 | 0.3% | Oct 13, 2026 | Access of resource using incompatible type ('type confusion') in Windows Device Association Service allows an authorized... |