CVE Vulnerability Database
Search and browse 424,162 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-96253 | HIGH | 7 | 0.3% | Oct 13, 2026 | Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96252 | CRITICAL | 9.1 | 0.5% | Oct 13, 2026 | Improper verification of cryptographic signature in Active Directory Federation Services (AD FS) allows an unauthorized ... |
| CVE-2026-96251 | HIGH | 8.8 | 0.5% | Oct 13, 2026 | Reliance on untrusted inputs in a security decision in Microsoft PowerShell allows an unauthorized attacker to execute c... |
| CVE-2026-96250 | HIGH | 7 | 0.3% | Oct 13, 2026 | Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96249 | HIGH | 7.8 | 0.3% | Oct 13, 2026 | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96248 | HIGH | 7.5 | 1.1% | Oct 13, 2026 | Stack-based buffer overflow in Windows Host Guardian Service allows an unauthorized attacker to deny service over a netw... |
| CVE-2026-96247 | MEDIUM | 5.5 | 0.4% | Oct 13, 2026 | Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information local... |
| CVE-2026-96246 | HIGH | 7.5 | 1.0% | Oct 13, 2026 | Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to disclose information over a network... |
| CVE-2026-96245 | HIGH | 7.5 | 1.0% | Oct 13, 2026 | Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose infor... |
| CVE-2026-96244 | HIGH | 7.8 | 0.3% | Oct 13, 2026 | Use after free in Windows Internal System User Profile allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96243 | HIGH | 7.8 | 0.3% | Oct 13, 2026 | Improper link resolution before file access ('link following') in Windows WalletService allows an authorized attacker to... |
| CVE-2026-96238 | MEDIUM | 6.5 | 0.2% | Oct 13, 2026 | Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network. |
| CVE-2026-96237 | HIGH | 7.5 | 0.5% | Oct 13, 2026 | Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to execute code over a ... |
| CVE-2026-96236 | HIGH | 7.5 | — | Oct 13, 2026 | Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service ove... |
| CVE-2026-96235 | HIGH | 8.8 | 0.7% | Oct 13, 2026 | Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network. |
| CVE-2026-96234 | MEDIUM | 5.3 | 0.3% | Oct 13, 2026 | Origin validation error in .NET allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-96233 | HIGH | 7.5 | 0.8% | Oct 13, 2026 | Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network. |
| CVE-2026-96232 | HIGH | 7.5 | 0.7% | Oct 13, 2026 | Out-of-bounds read in .NET allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-96231 | HIGH | 7.8 | 0.3% | Oct 13, 2026 | Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileg... |
| CVE-2026-96230 | HIGH | 8.8 | 0.8% | Oct 13, 2026 | Improper neutralization of input during web page generation ('cross-site scripting') in ASP.NET Core allows an unauthori... |
| CVE-2026-96229 | MEDIUM | 6.5 | 0.8% | Oct 13, 2026 | Permissive list of allowed inputs in .NET allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-96225 | HIGH | 7.8 | 0.3% | Oct 13, 2026 | Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileg... |
| CVE-2026-96224 | HIGH | 8.8 | 0.7% | Oct 13, 2026 | Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network. |
| CVE-2026-96223 | HIGH | 7.8 | 0.3% | Oct 13, 2026 | Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96222 | HIGH | 7.4 | 0.6% | Oct 13, 2026 | Improper certificate validation in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perfo... |