CVE Vulnerability Database
Search and browse 424,227 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-83872 | HIGH | 7.8 | 0.3% | Oct 13, 2026 | Incorrect conversion between numeric types in Windows TCP/IP allows an authorized attacker to elevate privileges locally... |
| CVE-2026-83871 | HIGH | 7 | 0.2% | Oct 13, 2026 | Heap-based buffer overflow in OpenSSH for Windows allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83870 | MEDIUM | 5.5 | 0.4% | Oct 13, 2026 | Out-of-bounds read in Windows Aggregated Data Platform Service allows an authorized attacker to disclose information loc... |
| CVE-2026-83869 | CRITICAL | 9.8 | 0.6% | Oct 13, 2026 | Integer underflow (wrap or wraparound) in DNS Server allows an unauthorized attacker to execute code over a network. |
| CVE-2026-83868 | HIGH | 7 | 0.2% | Oct 13, 2026 | Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Bluetooth Drive... |
| CVE-2026-83867 | HIGH | 7.8 | 0.4% | Oct 13, 2026 | Heap-based buffer overflow in Windows Push Notifications allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83866 | HIGH | 7 | 0.3% | Oct 13, 2026 | Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83865 | MEDIUM | 4.7 | 0.3% | Oct 13, 2026 | Relative path traversal in Windows Internet (wininet.dll) allows an authorized attacker to perform tampering locally. |
| CVE-2026-83864 | MEDIUM | 5.5 | 0.3% | Oct 13, 2026 | Improper access control in Windows NTFS allows an authorized attacker to disclose information locally. |
| CVE-2026-83863 | HIGH | 7.8 | 0.4% | Oct 13, 2026 | Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83862 | HIGH | 8.8 | 0.6% | Oct 13, 2026 | Use after free in Windows Network Load Balancing allows an unauthorized attacker to execute code over an adjacent networ... |
| CVE-2026-83861 | HIGH | 7.8 | 0.3% | Oct 13, 2026 | Heap-based buffer overflow in Windows Remote Desktop Protocol allows an authorized attacker to elevate privileges locall... |
| CVE-2026-83860 | HIGH | 7.5 | 1.1% | Oct 13, 2026 | Stack-based buffer overflow in Windows GDI allows an unauthorized attacker to deny service over a network. |
| CVE-2026-83859 | HIGH | 7.8 | 0.3% | Oct 13, 2026 | Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83857 | HIGH | 7.8 | 0.3% | Oct 13, 2026 | Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privi... |
| CVE-2026-83856 | HIGH | 8.1 | 0.6% | Oct 13, 2026 | Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network. |
| CVE-2026-83855 | HIGH | 7.5 | 1.2% | Oct 13, 2026 | Integer underflow (wrap or wraparound) in Windows WLAN Service allows an unauthorized attacker to deny service over a ne... |
| CVE-2026-83854 | MEDIUM | 5.5 | 0.3% | Oct 13, 2026 | Improper access control in Windows Notification allows an authorized attacker to disclose information locally. |
| CVE-2026-83853 | HIGH | 7 | 0.3% | Oct 13, 2026 | Use after free in Windows Hello allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83852 | HIGH | 7 | 0.3% | Oct 13, 2026 | Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83851 | HIGH | 8.8 | 0.8% | Oct 13, 2026 | Heap-based buffer overflow in Windows Partition Management Driver allows an unauthorized attacker to elevate privileges ... |
| CVE-2026-83850 | HIGH | 7.8 | 0.4% | Oct 13, 2026 | Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges loc... |
| CVE-2026-83849 | MEDIUM | 5.5 | 0.4% | Oct 13, 2026 | Out-of-bounds read in Windows Hello allows an authorized attacker to disclose information locally. |
| CVE-2026-83848 | HIGH | 7.8 | 0.4% | Oct 13, 2026 | Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges l... |
| CVE-2026-83847 | HIGH | 7.8 | 0.3% | Oct 13, 2026 | Heap-based buffer overflow in Microsoft Account allows an authorized attacker to elevate privileges locally. |