CVE Vulnerability Database
Search and browse 424,227 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-83682 | HIGH | 7 | 0.3% | Oct 13, 2026 | Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83681 | MEDIUM | 5.5 | 0.3% | Oct 13, 2026 | Weak authentication in Microsoft PowerToys allows an authorized attacker to perform tampering locally. |
| CVE-2026-83680 | HIGH | 7 | 0.3% | Oct 13, 2026 | Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83679 | HIGH | 7.8 | 0.4% | Oct 13, 2026 | Use after free in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83678 | HIGH | 7.8 | 0.4% | Oct 13, 2026 | Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83677 | HIGH | 7.5 | 1.1% | Oct 13, 2026 | Missing release of memory after effective lifetime in Windows DHCP Client allows an unauthorized attacker to deny servic... |
| CVE-2026-83676 | HIGH | 7 | 0.3% | Oct 13, 2026 | Integer underflow (wrap or wraparound) in Windows Installer allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83675 | HIGH | 7 | 0.3% | Oct 13, 2026 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83674 | HIGH | 8.1 | 0.7% | Oct 13, 2026 | Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing ... |
| CVE-2026-83672 | MEDIUM | 4.7 | 0.7% | Oct 13, 2026 | Exposure of sensitive system information to an unauthorized control sphere in Windows Installer allows an authorized att... |
| CVE-2026-83671 | MEDIUM | 6.5 | 0.5% | Oct 13, 2026 | Out-of-bounds read in Windows Hyper-V allows an authorized attacker to disclose information locally. |
| CVE-2026-83670 | HIGH | 7.5 | 1.1% | Oct 13, 2026 | Out-of-bounds read in Function Discovery Service (fdwsd.dll) allows an unauthorized attacker to disclose information ove... |
| CVE-2026-83669 | HIGH | 7.8 | 0.4% | Oct 13, 2026 | Use of uninitialized resource in Windows Error Reporting allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83668 | MEDIUM | 5.5 | 0.4% | Oct 13, 2026 | Out-of-bounds read in Windows WLAN Service allows an authorized attacker to disclose information locally. |
| CVE-2026-83667 | MEDIUM | 6.5 | 1.2% | Oct 13, 2026 | Out-of-bounds read in Active Directory Domain Services allows an authorized attacker to deny service over a network. |
| CVE-2026-83666 | HIGH | 7 | 0.2% | Oct 13, 2026 | Concurrent execution using shared resource with improper synchronization ('race condition') in Active Directory Certific... |
| CVE-2026-83665 | HIGH | 7.5 | 1.4% | Oct 13, 2026 | Null pointer dereference in Windows DHCP Server allows an unauthorized attacker to deny service over a network. |
| CVE-2026-83664 | MEDIUM | 5.5 | 0.4% | Oct 13, 2026 | Access of resource using incompatible type ('type confusion') in Windows Portable Device File System Driver allows an au... |
| CVE-2026-83659 | HIGH | 7.8 | 0.3% | Oct 13, 2026 | Improper link resolution before file access ('link following') in Windows User Profile Service allows an authorized atta... |
| CVE-2026-83658 | MEDIUM | 5.5 | 0.3% | Oct 13, 2026 | Improper access control in Windows Error Reporting allows an authorized attacker to disclose information locally. |
| CVE-2026-83657 | MEDIUM | 5.5 | 0.3% | Oct 13, 2026 | Weak authentication in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally... |
| CVE-2026-83656 | MEDIUM | 4.7 | 0.3% | Oct 13, 2026 | Missing authentication for critical function in Windows Modern Device Management (MDM) allows an authorized attacker to ... |
| CVE-2026-83655 | HIGH | 7.5 | 1.4% | Oct 13, 2026 | Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to deny service over a network. |
| CVE-2026-83654 | HIGH | 7.8 | 0.3% | Oct 13, 2026 | Missing authentication for critical function in Windows Modern Device Management (MDM) allows an authorized attacker to ... |
| CVE-2026-83652 | HIGH | 7.8 | 0.4% | Oct 13, 2026 | Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally. |