CVE Vulnerability Database
Search and browse 424,227 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-83511 | HIGH | 7.4 | 0.7% | Oct 13, 2026 | Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing ... |
| CVE-2026-83510 | HIGH | 7 | 0.2% | Oct 13, 2026 | Time-of-check time-of-use (toctou) race condition in Windows Setup Files Cleanup allows an authorized attacker to elevat... |
| CVE-2026-83509 | HIGH | 7 | 0.3% | Oct 13, 2026 | Untrusted search path in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83508 | HIGH | 7.8 | 0.4% | Oct 13, 2026 | Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83507 | MEDIUM | 5.5 | 0.5% | Oct 13, 2026 | Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authoriz... |
| CVE-2026-83506 | HIGH | 7.8 | 0.4% | Oct 13, 2026 | Untrusted search path in Servicing Stack Updates allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83505 | HIGH | 7 | 0.3% | Oct 13, 2026 | Time-of-check time-of-use (toctou) race condition in Windows Setup Files Cleanup allows an authorized attacker to elevat... |
| CVE-2026-83504 | MEDIUM | 4.7 | 0.3% | Oct 13, 2026 | Time-of-check time-of-use (toctou) race condition in Windows SmartScreen allows an authorized attacker to disclose infor... |
| CVE-2026-83500 | MEDIUM | 6.1 | 0.5% | Oct 13, 2026 | Url redirection to untrusted site ('open redirect') in Windows BitLocker allows an unauthorized attacker to bypass a sec... |
| CVE-2026-83499 | HIGH | 7.8 | 0.3% | Oct 13, 2026 | Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate pri... |
| CVE-2026-81971 | HIGH | 7 | 0.2% | Oct 13, 2026 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows NTFS allows an au... |
| CVE-2026-81969 | HIGH | 7.8 | 0.3% | Oct 13, 2026 | Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate pri... |
| CVE-2026-81964 | MEDIUM | 5.5 | 0.4% | Oct 13, 2026 | Use of hard-coded credentials in Windows Update Orchestrator Service allows an authorized attacker to bypass a security ... |
| CVE-2026-78459 | HIGH | 7.8 | 0.4% | Oct 13, 2026 | Heap-based buffer overflow in Windows Internet Information Services allows an authorized attacker to elevate privileges ... |
| CVE-2026-77910 | HIGH | 8.8 | — | Oct 13, 2026 | Incorrect authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-77902 | HIGH | 8.8 | 0.8% | Oct 13, 2026 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-77496 | HIGH | 8.8 | 0.9% | Oct 13, 2026 | Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network. |
| CVE-2026-75120 | CRITICAL | 9.3 | 0.4% | Oct 13, 2026 | The OpenText™ (EnCase SAFE Agents) component utilized by OpenText™ Endpoint Investigator, OpenText™ Endpoint Forensics &... |
| CVE-2026-73027 | HIGH | 7.8 | 0.4% | Oct 13, 2026 | External control of system or configuration setting in Windows Setup Files Cleanup allows an authorized attacker to elev... |
| CVE-2026-72969 | HIGH | 7 | 0.3% | Oct 13, 2026 | Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges lo... |
| CVE-2026-72968 | HIGH | 7 | 0.3% | Oct 13, 2026 | Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges lo... |
| CVE-2026-72955 | HIGH | 7 | 0.3% | Oct 13, 2026 | Use after free in Windows Application Compatibility Cache allows an authorized attacker to elevate privileges locally. |
| CVE-2026-72934 | HIGH | 7 | 0.3% | Oct 13, 2026 | Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges lo... |
| CVE-2026-71347 | HIGH | 7 | 0.2% | Oct 13, 2026 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Security Center a... |
| CVE-2026-70580 | HIGH | 7.8 | 0.3% | Oct 13, 2026 | Missing authentication for critical function in Windows Credential Guard allows an authorized attacker to perform spoofi... |