CVE Vulnerability Database
Search and browse 424,162 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-96220 | HIGH | 7.8 | 0.7% | Oct 13, 2026 | Improper control of generation of code ('code injection') in Windows Assigned Access allows an authorized attacker to el... |
| CVE-2026-96219 | CRITICAL | 9.8 | 0.9% | Oct 13, 2026 | Out-of-bounds write in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to exe... |
| CVE-2026-96218 | MEDIUM | 5.5 | 0.6% | Oct 13, 2026 | Improper access control in Windows Update Stack allows an authorized attacker to perform tampering locally. |
| CVE-2026-96217 | HIGH | 7.8 | 0.3% | Oct 13, 2026 | Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96216 | HIGH | 7 | 0.3% | Oct 13, 2026 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96215 | HIGH | 7 | 0.2% | Oct 13, 2026 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Autopilot allows ... |
| CVE-2026-96209 | HIGH | 7 | 0.3% | Oct 13, 2026 | Out-of-bounds read in Windows Network File System allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96206 | MEDIUM | 5.5 | 0.4% | Oct 13, 2026 | Use of uninitialized resource in Windows Subsystem for Linux allows an authorized attacker to disclose information local... |
| CVE-2026-96204 | MEDIUM | 6.5 | — | Oct 13, 2026 | Server-side request forgery (ssrf) in Azure Arc allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-96202 | HIGH | 8.8 | 0.9% | Oct 13, 2026 | Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network... |
| CVE-2026-96188 | HIGH | 7.3 | — | Oct 13, 2026 | External control of system or configuration setting in Microsoft PowerToys allows an authorized attacker to elevate priv... |
| CVE-2026-96186 | HIGH | 7.8 | 1.7% | Oct 13, 2026 | Deserialization of untrusted data in Microsoft Windows Media Foundation allows an authorized attacker to elevate privile... |
| CVE-2026-96183 | MEDIUM | 5.5 | 0.3% | Oct 13, 2026 | Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized at... |
| CVE-2026-96118 | HIGH | 7.8 | 0.3% | Oct 13, 2026 | Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96113 | CRITICAL | 9.8 | 0.7% | Oct 13, 2026 | Heap-based buffer overflow in DNS Server allows an unauthorized attacker to execute code over a network. |
| CVE-2026-96108 | HIGH | 7.8 | 0.3% | Oct 13, 2026 | Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96096 | CRITICAL | 9.8 | 0.7% | Oct 13, 2026 | Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network. |
| CVE-2026-96071 | HIGH | 7.5 | 0.6% | Oct 13, 2026 | Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network. |
| CVE-2026-96044 | HIGH | 8.8 | 0.7% | Oct 13, 2026 | No cwe for this issue in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-95943 | HIGH | 7 | 0.3% | Oct 13, 2026 | Double free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-95904 | MEDIUM | 5.5 | 0.3% | Oct 13, 2026 | Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose information locally. |
| CVE-2026-95631 | CRITICAL | 9.1 | 0.9% | Oct 13, 2026 | Adobe Commerce is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution i... |
| CVE-2026-95630 | MEDIUM | 4.3 | 0.5% | Oct 13, 2026 | Adobe Commerce is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass.... |
| CVE-2026-94506 | MEDIUM | 6.5 | 0.9% | Oct 13, 2026 | Out-of-bounds read in Microsoft Office Access allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-92922 | HIGH | 8.1 | 0.9% | Oct 13, 2026 | Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a high-privilege... |