CVE Vulnerability Database
Search and browse 424,227 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-83651 | HIGH | 7.5 | 1.0% | Oct 13, 2026 | Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-83650 | HIGH | 7.8 | 0.4% | Oct 13, 2026 | Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83649 | MEDIUM | 6.5 | 1.2% | Oct 13, 2026 | Out-of-bounds read in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to deny s... |
| CVE-2026-83648 | MEDIUM | 6.5 | 1.2% | Oct 13, 2026 | Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a networ... |
| CVE-2026-83647 | HIGH | 7.5 | 1.3% | Oct 13, 2026 | Out-of-bounds read in Active Directory Domain Services allows an unauthorized attacker to deny service over a network. |
| CVE-2026-83646 | MEDIUM | 5.4 | 0.4% | Oct 13, 2026 | Url redirection to untrusted site ('open redirect') in Active Directory Federation Services (AD FS) allows an authorized... |
| CVE-2026-83645 | HIGH | 7.5 | 1.2% | Oct 13, 2026 | Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthori... |
| CVE-2026-83644 | HIGH | 7 | 0.3% | Oct 13, 2026 | Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83643 | HIGH | 8.8 | 0.9% | Oct 13, 2026 | Stack-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network. |
| CVE-2026-83642 | HIGH | 8.8 | 0.8% | Oct 13, 2026 | Access of resource using incompatible type ('type confusion') in DNS Server allows an unauthorized attacker to execute c... |
| CVE-2026-83641 | HIGH | 7.8 | 0.4% | Oct 13, 2026 | Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83640 | HIGH | 7.8 | 0.4% | Oct 13, 2026 | Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally. |
| CVE-2026-83639 | HIGH | 7.8 | 0.4% | Oct 13, 2026 | Heap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83638 | HIGH | 7.8 | 0.4% | Oct 13, 2026 | Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83637 | HIGH | 7.8 | 0.4% | Oct 13, 2026 | Out-of-bounds read in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83636 | MEDIUM | 6.5 | 0.4% | Oct 13, 2026 | Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally. |
| CVE-2026-83635 | HIGH | 7.5 | 1.2% | Oct 13, 2026 | Out-of-bounds read in DNS Server allows an unauthorized attacker to deny service over a network. |
| CVE-2026-83634 | HIGH | 7.8 | 0.4% | Oct 13, 2026 | Double free in Windows BitLocker allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83588 | HIGH | 7.8 | 0.4% | Oct 13, 2026 | Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83587 | HIGH | 7.8 | 0.4% | Oct 13, 2026 | Untrusted pointer dereference in Windows Core Messaging allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83586 | HIGH | 7.8 | 0.3% | Oct 13, 2026 | Weak authentication in Windows Resilient File System (ReFS) Deduplication Service allows an authorized attacker to eleva... |
| CVE-2026-83585 | HIGH | 7.8 | 0.4% | Oct 13, 2026 | Use of externally-controlled format string in Windows NTFS allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83584 | HIGH | 7 | 0.3% | Oct 13, 2026 | Use after free in Windows Smart Card allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83583 | HIGH | 7.8 | 0.3% | Oct 13, 2026 | Improper access control in Windows Geotag Broker allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83582 | MEDIUM | 4.7 | 0.4% | Oct 13, 2026 | Use after free in Windows Graphics Kernel allows an authorized attacker to disclose information locally. |