CVE Vulnerability Database

Search and browse 424,200 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.

CVE IDSeverityCVSSDescription
CVE-2026-83924HIGH7Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-83923HIGH8.8Relative path traversal in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.
CVE-2026-83922HIGH7.8Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
CVE-2026-83921HIGH7Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges loc...
CVE-2026-83920HIGH7.8Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges loc...
CVE-2026-83919HIGH7.8Heap-based buffer overflow in Microsoft Internet Messaging API allows an authorized attacker to execute code locally.
CVE-2026-83918HIGH7.8Integer overflow or wraparound in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-83917HIGH7Use after free in Windows ALPC allows an authorized attacker to elevate privileges locally.
CVE-2026-83916HIGH7Double free in Windows Error Reporting allows an authorized attacker to execute code locally.
CVE-2026-83915HIGH7Use after free in Windows Diagnostic Policy Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83914HIGH8.1Use after free in Microsoft XML allows an unauthorized attacker to execute code over a network.
CVE-2026-83913HIGH7.8Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-83912HIGH7.8Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
CVE-2026-83911HIGH7Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.
CVE-2026-83910CRITICAL9.8Out-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code over a network.
CVE-2026-83909MEDIUM4.7Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an a...
CVE-2026-83908HIGH7Release of invalid pointer or reference in RPC Runtime allows an authorized attacker to elevate privileges locally.
CVE-2026-83907MEDIUM5.5Exposure of sensitive system information to an unauthorized control sphere in Windows Hello allows an authorized attacke...
CVE-2026-83906MEDIUM6.5Incorrect implementation of authentication algorithm in Windows Shell allows an unauthorized attacker to perform spoofin...
CVE-2026-83905MEDIUM4.7Exposure of sensitive system information to an unauthorized control sphere in Windows Shell allows an authorized attacke...
CVE-2026-83904MEDIUM5.5Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.
CVE-2026-83903HIGH7.8Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
CVE-2026-83902HIGH7.8Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
CVE-2026-83901HIGH7Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
CVE-2026-83900HIGH7Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.