CVE Vulnerability Database
Search and browse 424,200 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-85874 | HIGH | 7.8 | 0.4% | Oct 13, 2026 | Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to execute code locally. |
| CVE-2026-85873 | MEDIUM | 6.5 | 0.8% | Oct 13, 2026 | Improper authorization in Skype for Business and Microsoft Lync allows an authorized attacker to elevate privileges over... |
| CVE-2026-85872 | HIGH | 7.8 | 0.3% | Oct 13, 2026 | Use after free in Windows Storage VSP Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85871 | HIGH | 7.8 | 0.3% | Oct 13, 2026 | Heap-based buffer overflow in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85870 | HIGH | 7 | 0.3% | Oct 13, 2026 | Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges ... |
| CVE-2026-85869 | HIGH | 7.8 | 0.3% | Oct 13, 2026 | Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges loc... |
| CVE-2026-85868 | HIGH | 7 | 0.3% | Oct 13, 2026 | Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85867 | HIGH | 7.8 | 0.2% | Oct 13, 2026 | Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileg... |
| CVE-2026-85866 | MEDIUM | 4.7 | 0.4% | Oct 13, 2026 | Exposure of sensitive system information to an unauthorized control sphere in Windows ALPC allows an authorized attacker... |
| CVE-2026-85865 | MEDIUM | 5.5 | 0.3% | Oct 13, 2026 | Improper authentication in Windows DHCP Server allows an authorized attacker to bypass a security feature locally. |
| CVE-2026-85864 | HIGH | 7.8 | 0.7% | Oct 13, 2026 | Improper privilege management in Python allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85863 | HIGH | 7.8 | 0.2% | Oct 13, 2026 | Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85861 | HIGH | 7.8 | 0.2% | Oct 13, 2026 | Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85860 | HIGH | 7.8 | 0.2% | Oct 13, 2026 | Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85859 | MEDIUM | 6.5 | 0.8% | Oct 13, 2026 | Null pointer dereference in Windows Message Queuing Queue Manager allows an authorized attacker to deny service over a n... |
| CVE-2026-85858 | HIGH | 7.8 | 0.3% | Oct 13, 2026 | Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85857 | MEDIUM | 5.5 | 0.5% | Oct 13, 2026 | Insertion of sensitive information into log file in Windows Kernel-Mode Drivers allows an authorized attacker to disclos... |
| CVE-2026-85856 | HIGH | 7.1 | 0.4% | Oct 13, 2026 | Heap-based buffer overflow in Windows Internet Connection Sharing (ICS) allows an authorized attacker to execute code ov... |
| CVE-2026-85855 | HIGH | 7 | 0.3% | Oct 13, 2026 | Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85854 | HIGH | 7 | 0.3% | Oct 13, 2026 | Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85853 | HIGH | 7 | 0.3% | Oct 13, 2026 | Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85852 | MEDIUM | 5.5 | 0.4% | Oct 13, 2026 | Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose information locally. |
| CVE-2026-85851 | HIGH | 7.8 | 0.3% | Oct 13, 2026 | Use after free in Windows SmartScreen allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85850 | HIGH | 7.8 | 0.3% | Oct 13, 2026 | Release of invalid pointer or reference in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85849 | HIGH | 7.8 | 0.5% | Oct 13, 2026 | Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized a... |