CVE Vulnerability Database
Search and browse 424,200 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-84994 | HIGH | 8.7 | 0.5% | Oct 13, 2026 | Qwik is a performance-focused JavaScript framework. Prior to @builder.io/qwik 1.20.0 and @qwik.dev/core 2.0.0-beta.37, d... |
| CVE-2026-84020 | HIGH | 7 | 0.3% | Oct 13, 2026 | Use after free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges l... |
| CVE-2026-84019 | HIGH | 7 | 0.2% | Oct 13, 2026 | Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally. |
| CVE-2026-84018 | HIGH | 7 | 0.2% | Oct 13, 2026 | Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally. |
| CVE-2026-84017 | HIGH | 7.5 | 1.1% | Oct 13, 2026 | Null pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny ser... |
| CVE-2026-84016 | HIGH | 7.8 | 0.3% | Oct 13, 2026 | Out-of-bounds write in Windows EAPHost Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-84015 | CRITICAL | 9.8 | 0.9% | Oct 13, 2026 | Heap-based buffer overflow in Remote Access Point-to-Point Protocol (PPP) EAP-TLS allows an unauthorized attacker to exe... |
| CVE-2026-84014 | HIGH | 7 | 0.2% | Oct 13, 2026 | Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges loc... |
| CVE-2026-84013 | HIGH | 7.8 | 0.3% | Oct 13, 2026 | Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally. |
| CVE-2026-84012 | HIGH | 8.1 | 0.7% | Oct 13, 2026 | Double free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network. |
| CVE-2026-84011 | MEDIUM | 5.5 | 0.3% | Oct 13, 2026 | Incorrect authorization in Windows SMB Client allows an authorized attacker to bypass a security feature locally. |
| CVE-2026-84009 | MEDIUM | 4.7 | 0.2% | Oct 13, 2026 | Time-of-check time-of-use (toctou) race condition in Windows Projected File System allows an authorized attacker to perf... |
| CVE-2026-84008 | HIGH | 7.5 | 0.8% | Oct 13, 2026 | Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network. |
| CVE-2026-84007 | MEDIUM | 6.5 | 1.0% | Oct 13, 2026 | Out-of-bounds read in Remote Desktop Gateway Service allows an authorized attacker to disclose information over a networ... |
| CVE-2026-83935 | CRITICAL | 9.8 | 0.7% | Oct 13, 2026 | Heap-based buffer overflow in Microsoft XML allows an unauthorized attacker to execute code over a network. |
| CVE-2026-83934 | HIGH | 8.8 | 0.8% | Oct 13, 2026 | Stack-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network. |
| CVE-2026-83933 | MEDIUM | 5.5 | 0.5% | Oct 13, 2026 | Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authoriz... |
| CVE-2026-83932 | HIGH | 7.8 | 0.3% | Oct 13, 2026 | Heap-based buffer overflow in Windows Group Policy allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83931 | HIGH | 7.8 | 0.3% | Oct 13, 2026 | Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally. |
| CVE-2026-83930 | HIGH | 7 | 0.3% | Oct 13, 2026 | Use after free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83929 | HIGH | 8.8 | 0.6% | Oct 13, 2026 | Out-of-bounds write in Windows GDI allows an unauthorized attacker to execute code over a network. |
| CVE-2026-83928 | HIGH | 8.8 | 0.6% | Oct 13, 2026 | Out-of-bounds write in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to exe... |
| CVE-2026-83927 | HIGH | 7.8 | 0.4% | Oct 13, 2026 | Improper link resolution before file access ('link following') in Windows Registry allows an authorized attacker to elev... |
| CVE-2026-83926 | MEDIUM | 4.4 | 0.4% | Oct 13, 2026 | Improper certificate validation in Windows Hello allows an authorized attacker to bypass a security feature locally. |
| CVE-2026-83925 | MEDIUM | 4.7 | 0.7% | Oct 13, 2026 | Use of uninitialized resource in Windows Kernel allows an authorized attacker to disclose information locally. |