CVE Vulnerability Database
Search and browse 424,227 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-83793 | HIGH | 7 | 0.3% | Oct 13, 2026 | Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authoriz... |
| CVE-2026-83792 | HIGH | 7.8 | 0.3% | Oct 13, 2026 | Incorrect authorization in Windows Device Install Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83791 | HIGH | 7.8 | 0.3% | Oct 13, 2026 | Improper authorization in Windows Virtual Input allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83790 | HIGH | 7 | 0.3% | Oct 13, 2026 | Use after free in Windows Hello allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83789 | CRITICAL | 9.8 | 0.9% | Oct 13, 2026 | Heap-based buffer overflow in Windows SMB Client allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-83788 | MEDIUM | 4.6 | 0.5% | Oct 13, 2026 | Buffer over-read in Windows RNDIS allows an unauthorized attacker to disclose information with a physical attack. |
| CVE-2026-83787 | MEDIUM | 5.5 | 0.3% | Oct 13, 2026 | Insufficient verification of data authenticity in Windows DHCP Server allows an authorized attacker to bypass a security... |
| CVE-2026-83786 | MEDIUM | 4.7 | 0.7% | Oct 13, 2026 | Generation of error message containing sensitive information in Windows NTFS allows an authorized attacker to disclose i... |
| CVE-2026-83785 | HIGH | 7 | 0.3% | Oct 13, 2026 | Use after free in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83784 | HIGH | 8.8 | 1.1% | Oct 13, 2026 | Absolute path traversal in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges over... |
| CVE-2026-83783 | HIGH | 7.8 | 0.4% | Oct 13, 2026 | Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges loc... |
| CVE-2026-83782 | CRITICAL | 9.8 | 1.0% | Oct 13, 2026 | Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network. |
| CVE-2026-83781 | HIGH | 7.8 | 0.4% | Oct 13, 2026 | Improper null termination in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate pr... |
| CVE-2026-83780 | CRITICAL | 9.8 | 1.1% | Oct 13, 2026 | Use after free in Windows CCFFilter Driver allows an unauthorized attacker to execute code over a network. |
| CVE-2026-83779 | HIGH | 7.8 | 0.4% | Oct 13, 2026 | Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83778 | HIGH | 8.8 | 0.8% | Oct 13, 2026 | Heap-based buffer overflow in Microsoft Internet Messaging API allows an unauthorized attacker to execute code over a ne... |
| CVE-2026-83777 | HIGH | 8.8 | 0.6% | Oct 13, 2026 | Heap-based buffer overflow in Windows Bluetooth Service allows an unauthorized attacker to elevate privileges over an ad... |
| CVE-2026-83776 | MEDIUM | 6.8 | 0.4% | Oct 13, 2026 | Out-of-bounds read in Microsoft Bluetooth Driver allows an unauthorized attacker to elevate privileges with a physical a... |
| CVE-2026-83775 | HIGH | 7 | 0.2% | Oct 13, 2026 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows ... |
| CVE-2026-83774 | MEDIUM | 4.7 | 0.4% | Oct 13, 2026 | Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an a... |
| CVE-2026-83773 | MEDIUM | 5.5 | 1.0% | Oct 13, 2026 | Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service Module allows an auth... |
| CVE-2026-83771 | HIGH | 8.8 | 0.6% | Oct 13, 2026 | Use after free in Windows Camera Frame Server Monitor allows an unauthorized attacker to elevate privileges over an adja... |
| CVE-2026-83770 | CRITICAL | 9.8 | 1.1% | Oct 13, 2026 | Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network. |
| CVE-2026-83769 | HIGH | 7.8 | 0.4% | Oct 13, 2026 | Use after free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83768 | HIGH | 7.8 | 0.4% | Oct 13, 2026 | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. |