CVE Vulnerability Database
Search and browse 424,200 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-85927 | HIGH | 7.8 | 0.3% | Oct 13, 2026 | Heap-based buffer overflow in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevat... |
| CVE-2026-85926 | HIGH | 8.1 | 0.7% | Oct 13, 2026 | Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a... |
| CVE-2026-85925 | HIGH | 8.2 | 0.5% | Oct 13, 2026 | Improper restriction of communication channel to intended endpoints in Azure Key Vault allows an authorized attacker to ... |
| CVE-2026-85922 | HIGH | 7.4 | 0.5% | Oct 13, 2026 | Weak authentication in Azure Key Vault allows an unauthorized attacker to bypass a security feature over a network. |
| CVE-2026-85920 | HIGH | 7 | 0.2% | Oct 13, 2026 | Time-of-check time-of-use (toctou) race condition in Windows BitLocker allows an authorized attacker to elevate privileg... |
| CVE-2026-85918 | HIGH | 7 | 0.3% | Oct 13, 2026 | Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges... |
| CVE-2026-85916 | MEDIUM | 5.5 | 0.5% | Oct 13, 2026 | Exposure of private personal information to an unauthorized actor in Azure Active Directory allows an unauthorized attac... |
| CVE-2026-85915 | HIGH | 7.8 | 0.3% | Oct 13, 2026 | Heap-based buffer overflow in Windows PCI Bus Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85914 | HIGH | 7 | 0.2% | Oct 13, 2026 | Use after free in Windows Embedded Mode Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85912 | HIGH | 7 | 0.2% | Oct 13, 2026 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Clipboard User Se... |
| CVE-2026-85911 | HIGH | 7.8 | 0.4% | Oct 13, 2026 | Use after free in Windows StateRepository API allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85910 | MEDIUM | 5.5 | 0.4% | Oct 13, 2026 | Buffer over-read in Windows StateRepository API allows an authorized attacker to disclose information locally. |
| CVE-2026-85909 | MEDIUM | 5.5 | 0.4% | Oct 13, 2026 | Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose ... |
| CVE-2026-85908 | HIGH | 7.8 | 0.4% | Oct 13, 2026 | Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85906 | HIGH | 7.8 | 0.3% | Oct 13, 2026 | Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85905 | HIGH | 8.8 | 0.4% | Oct 13, 2026 | Heap-based buffer overflow in Windows UI Immersive Server allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85904 | HIGH | 7 | 0.2% | Oct 13, 2026 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Device Associatio... |
| CVE-2026-85903 | HIGH | 8.8 | 0.6% | Oct 13, 2026 | Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network. |
| CVE-2026-85902 | HIGH | 7.8 | 0.3% | Oct 13, 2026 | Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85901 | HIGH | 7.8 | 0.4% | Oct 13, 2026 | Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85900 | HIGH | 8.8 | 1.5% | Oct 13, 2026 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a ne... |
| CVE-2026-85891 | HIGH | 7.5 | — | Oct 13, 2026 | Exposure of sensitive information to an unauthorized actor in Azure HDInsight allows an unauthorized attacker to disclos... |
| CVE-2026-85884 | HIGH | 7.8 | 0.4% | Oct 13, 2026 | Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized at... |
| CVE-2026-85881 | HIGH | 8 | 0.7% | Oct 13, 2026 | Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges over a n... |
| CVE-2026-85879 | HIGH | 7 | 0.2% | Oct 13, 2026 | Time-of-check time-of-use (toctou) race condition in Windows Subsystem for Linux allows an authorized attacker to elevat... |