CVE Vulnerability Database
Search and browse 424,162 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-96866 | HIGH | 7.5 | 1.1% | Oct 13, 2026 | Out-of-bounds read in Network Device Enrollment Service (NDES) allows an unauthorized attacker to deny service over a ne... |
| CVE-2026-96865 | MEDIUM | 5.6 | 0.4% | Oct 13, 2026 | Exposure of sensitive system information to an unauthorized control sphere in Windows Secure Kernel Mode allows an autho... |
| CVE-2026-96864 | CRITICAL | 9.8 | 0.6% | Oct 13, 2026 | Double free in Microsoft Failover Cluster Virtual Driver allows an unauthorized attacker to execute code over a network. |
| CVE-2026-96863 | MEDIUM | 6.8 | 0.3% | Oct 13, 2026 | Heap-based buffer overflow in Windows Storage Port Driver allows an unauthorized attacker to elevate privileges with a p... |
| CVE-2026-96862 | HIGH | 7.8 | 0.3% | Oct 13, 2026 | Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96861 | HIGH | 7.5 | 1.1% | Oct 13, 2026 | Out-of-bounds read in Network Device Enrollment Service (NDES) allows an unauthorized attacker to deny service over a ne... |
| CVE-2026-96860 | MEDIUM | 5.5 | 0.4% | Oct 13, 2026 | Out-of-bounds read in Windows USB Print Driver allows an authorized attacker to disclose information locally. |
| CVE-2026-96859 | MEDIUM | 5.5 | 0.4% | Oct 13, 2026 | Out-of-bounds read in Windows Imaging Component allows an authorized attacker to disclose information locally. |
| CVE-2026-96858 | MEDIUM | 5.5 | 0.5% | Oct 13, 2026 | Missing authentication for critical function in Windows Security Account Manager allows an authorized attacker to perfor... |
| CVE-2026-96857 | MEDIUM | 5.5 | 0.4% | Oct 13, 2026 | Files or directories accessible to external parties in Windows Projected File System allows an authorized attacker to di... |
| CVE-2026-96856 | HIGH | 7.8 | 0.3% | Oct 13, 2026 | Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges loc... |
| CVE-2026-96855 | MEDIUM | 5.5 | 0.3% | Oct 13, 2026 | Improper access control in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering loc... |
| CVE-2026-96854 | MEDIUM | 5.5 | 0.3% | Oct 13, 2026 | Access of resource using incompatible type ('type confusion') in Windows Device Association Service allows an authorized... |
| CVE-2026-96853 | MEDIUM | 4.7 | 0.2% | Oct 13, 2026 | Time-of-check time-of-use (toctou) race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to dis... |
| CVE-2026-96852 | HIGH | 7 | 0.3% | Oct 13, 2026 | Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96851 | MEDIUM | 5.5 | 0.4% | Oct 13, 2026 | Buffer over-read in Windows Management Instrumentation allows an authorized attacker to disclose information locally. |
| CVE-2026-96850 | MEDIUM | 5.5 | 0.4% | Oct 13, 2026 | Use of uninitialized resource in Windows Modern Device Management (MDM) allows an authorized attacker to disclose inform... |
| CVE-2026-96849 | MEDIUM | 5.5 | 0.4% | Oct 13, 2026 | Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information local... |
| CVE-2026-96848 | MEDIUM | 5.5 | 0.4% | Oct 13, 2026 | Buffer over-read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. |
| CVE-2026-96847 | HIGH | 7.8 | 0.3% | Oct 13, 2026 | Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96846 | MEDIUM | 5.5 | 0.3% | Oct 13, 2026 | Out-of-bounds read in WebDAV allows an authorized attacker to disclose information locally. |
| CVE-2026-96844 | HIGH | 8 | 0.5% | Oct 13, 2026 | Integer underflow (wrap or wraparound) in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges... |
| CVE-2026-96843 | HIGH | 7.8 | 0.3% | Oct 13, 2026 | Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96325 | HIGH | 7.5 | 0.8% | Oct 13, 2026 | Missing reference to active allocated resource in Windows SMB Server allows an unauthorized attacker to deny service ove... |
| CVE-2026-96324 | HIGH | 7.8 | 0.3% | Oct 13, 2026 | Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |