CVE Vulnerability Database

Search and browse 424,227 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.

CVE IDSeverityCVSSDescription
CVE-2026-83767HIGH7.8Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-83766MEDIUM4.2Incorrect authorization in Windows Hyper-V allows an authorized attacker to bypass a security feature over an adjacent n...
CVE-2026-83765MEDIUM5.5Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.
CVE-2026-83764MEDIUM5.5Incorrect authorization in Windows Clipboard User Service allows an authorized attacker to disclose information locally.
CVE-2026-83763HIGH7.8Access of resource using incompatible type ('type confusion') in Windows Input System allows an authorized attacker to e...
CVE-2026-83762HIGH7.8Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-83761HIGH7.8Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
CVE-2026-83760MEDIUM5.5Out-of-bounds read in Microsoft Bluetooth Driver allows an authorized attacker to disclose information locally.
CVE-2026-83759HIGH8.8Improper control of generation of code ('code injection') in Windows Encrypting File System (EFS) allows an authorized a...
CVE-2026-83758HIGH7.8Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to execute code locally.
CVE-2026-83757HIGH7.8Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-83756HIGH7.8Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
CVE-2026-83755MEDIUM5.5Use of uninitialized resource in Windows Win32K allows an authorized attacker to disclose information locally.
CVE-2026-83754HIGH7.5Heap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.
CVE-2026-83753HIGH7.8Heap-based buffer overflow in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges lo...
CVE-2026-83752HIGH7Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-83751HIGH7Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
CVE-2026-83750HIGH7Time-of-check time-of-use (toctou) race condition in Windows Error Reporting allows an authorized attacker to elevate pr...
CVE-2026-83749HIGH7Use after free in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
CVE-2026-83748CRITICAL9.8Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.
CVE-2026-83747MEDIUM5.5Out-of-bounds read in Windows Error Reporting allows an authorized attacker to disclose information locally.
CVE-2026-83746HIGH8.1Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to elevate privileges ove...
CVE-2026-83741HIGH7.8Use after free in Internet Explorer allows an authorized attacker to elevate privileges locally.
CVE-2026-83740HIGH7Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.
CVE-2026-83739HIGH7.5Use after free in Windows Bluetooth Service allows an unauthorized attacker to execute code over an adjacent network.