CVE Vulnerability Database
Search and browse 424,200 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-88093 | HIGH | 7.8 | 0.3% | Oct 13, 2026 | Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally. |
| CVE-2026-88092 | CRITICAL | 9.4 | 0.8% | Oct 13, 2026 | Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized ... |
| CVE-2026-88091 | HIGH | 7.8 | 2.1% | Oct 13, 2026 | Deserialization of untrusted data in Windows Management Instrumentation allows an authorized attacker to elevate privile... |
| CVE-2026-88080 | HIGH | 7.8 | 0.2% | Oct 13, 2026 | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
| CVE-2026-88079 | HIGH | 7 | 0.3% | Oct 13, 2026 | Null pointer dereference in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally. |
| CVE-2026-88076 | HIGH | 7 | 0.3% | Oct 13, 2026 | Null pointer dereference in Windows Installer allows an authorized attacker to elevate privileges locally. |
| CVE-2026-88075 | HIGH | 8.8 | 0.6% | Oct 13, 2026 | Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager ... |
| CVE-2026-88074 | HIGH | 7.8 | 0.3% | Oct 13, 2026 | Integer overflow or wraparound in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to e... |
| CVE-2026-88073 | HIGH | 7.8 | 0.3% | Oct 13, 2026 | Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-88072 | HIGH | 7.8 | 0.4% | Oct 13, 2026 | Improper access control in Windows Host Guardian Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-88071 | HIGH | 7.8 | 0.3% | Oct 13, 2026 | Double free in Windows Hyper-V allows an authorized attacker to elevate privileges locally. |
| CVE-2026-88070 | HIGH | 7.8 | 0.3% | Oct 13, 2026 | Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges locally. |
| CVE-2026-87716 | HIGH | 7.5 | 1.1% | Oct 13, 2026 | Heap-based buffer overflow in Windows Storage Spaces Controller allows an unauthorized attacker to deny service over a n... |
| CVE-2026-87715 | HIGH | 7 | 0.2% | Oct 13, 2026 | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
| CVE-2026-87714 | MEDIUM | 6.5 | 0.5% | Oct 13, 2026 | Missing authorization in WebDAV allows an authorized attacker to bypass a security feature over a network. |
| CVE-2026-87713 | HIGH | 7.5 | 0.3% | Oct 13, 2026 | Use after free in Windows Bluetooth Port Driver allows an unauthorized attacker to elevate privileges over an adjacent n... |
| CVE-2026-87712 | HIGH | 7.8 | 0.2% | Oct 13, 2026 | Use after free in Windows Quality of Service (QoS) Packet Scheduler allows an authorized attacker to elevate privileges ... |
| CVE-2026-87711 | HIGH | 7.8 | 0.2% | Oct 13, 2026 | Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. |
| CVE-2026-87710 | HIGH | 7 | 0.1% | Oct 13, 2026 | Improper access control in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate p... |
| CVE-2026-87709 | MEDIUM | 5.5 | 0.3% | Oct 13, 2026 | Improper access control in Windows Host Guardian Service allows an authorized attacker to perform tampering locally. |
| CVE-2026-87708 | HIGH | 7 | 0.3% | Oct 13, 2026 | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
| CVE-2026-87707 | HIGH | 7.8 | 0.2% | Oct 13, 2026 | Heap-based buffer overflow in Windows Fax and Scan Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-87706 | HIGH | 7.8 | 0.2% | Oct 13, 2026 | Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges loca... |
| CVE-2026-87705 | HIGH | 7.4 | 0.4% | Oct 13, 2026 | Improper verification of source of a communication channel in Windows Hyper-V allows an unauthorized attacker to bypass ... |
| CVE-2026-87704 | HIGH | 7 | 0.3% | Oct 13, 2026 | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |