CVE Vulnerability Database

Search and browse 424,200 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.

CVE IDSeverityCVSSDescription
CVE-2026-85848HIGH7.8Heap-based buffer overflow in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to el...
CVE-2026-85847MEDIUM6.5Out-of-bounds read in Windows Print Spooler Components allows an unauthorized attacker to disclose information over a ne...
CVE-2026-85846HIGH7Use after free in Windows Web Account Manager allows an authorized attacker to elevate privileges locally.
CVE-2026-85843HIGH7.8Use of uninitialized resource in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to...
CVE-2026-85842HIGH7.8Use of externally-controlled format string in Windows Image Acquisition allows an authorized attacker to elevate privile...
CVE-2026-85841MEDIUM6.6Use after free in Windows DHCP Server allows an authorized attacker to execute code over a network.
CVE-2026-85840MEDIUM6.5Files or directories accessible to external parties in Windows Event Viewer allows an authorized attacker to disclose in...
CVE-2026-85837HIGH7.8Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-85836HIGH7.8Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-85835MEDIUM5.5Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally.
CVE-2026-85834HIGH7Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
CVE-2026-85833HIGH7.8Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.
CVE-2026-85832HIGH7.8Heap-based buffer overflow in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to el...
CVE-2026-85831MEDIUM5.5Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to disclose information locally.
CVE-2026-85830MEDIUM5.5Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locally.
CVE-2026-85829HIGH7.8Double free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally.
CVE-2026-85828HIGH7Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.
CVE-2026-85827HIGH7Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.
CVE-2026-85826HIGH7Out-of-bounds write in Windows Fast FAT Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-85825HIGH7Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privi...
CVE-2026-85824HIGH7Use after free in Windows Composite Image File System allows an authorized attacker to elevate privileges locally.
CVE-2026-85823HIGH7Use after free in Windows Composite Image File System allows an authorized attacker to elevate privileges locally.
CVE-2026-85822HIGH7.8Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate privileges locally.
CVE-2026-85821MEDIUM6.5Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose ...
CVE-2026-85820HIGH7.8Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privi...