CVE Vulnerability Database
Search and browse 424,227 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-70251 | HIGH | 7.5 | 0.6% | Oct 13, 2026 | Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges ov... |
| CVE-2026-70250 | HIGH | 8.8 | 0.5% | Oct 13, 2026 | Use after free in Windows DHCP Client allows an unauthorized attacker to execute code over an adjacent network. |
| CVE-2026-70249 | HIGH | 7 | 0.3% | Oct 13, 2026 | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70248 | MEDIUM | 6.5 | 0.4% | Oct 13, 2026 | Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally. |
| CVE-2026-70247 | HIGH | 7.8 | 0.3% | Oct 13, 2026 | Out-of-bounds read in Windows HTTP.sys allows an authorized attacker to execute code locally. |
| CVE-2026-70246 | HIGH | 8.8 | 0.8% | Oct 13, 2026 | Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a networ... |
| CVE-2026-70245 | HIGH | 7.8 | 0.4% | Oct 13, 2026 | Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an... |
| CVE-2026-70244 | MEDIUM | 6.5 | 0.9% | Oct 13, 2026 | Out-of-bounds read in DNS Server allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-70243 | HIGH | 7 | 0.3% | Oct 13, 2026 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70242 | CRITICAL | 9.8 | 1.0% | Oct 13, 2026 | Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. |
| CVE-2026-70241 | HIGH | 7 | 0.3% | Oct 13, 2026 | Use after free in Windows Kerberos allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70238 | HIGH | 7.8 | 0.4% | Oct 13, 2026 | Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges loca... |
| CVE-2026-70237 | HIGH | 7 | 0.3% | Oct 13, 2026 | Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges loca... |
| CVE-2026-70236 | HIGH | 7 | 0.3% | Oct 13, 2026 | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70235 | MEDIUM | 5.5 | 0.3% | Oct 13, 2026 | Improper authentication in Windows Event Tracing allows an authorized attacker to perform spoofing locally. |
| CVE-2026-70234 | MEDIUM | 5.5 | 0.4% | Oct 13, 2026 | Buffer over-read in Desktop Window Manager allows an authorized attacker to disclose information locally. |
| CVE-2026-70233 | HIGH | 7.8 | 0.5% | Oct 13, 2026 | Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges ... |
| CVE-2026-70232 | MEDIUM | 5.5 | 0.5% | Oct 13, 2026 | Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attack... |
| CVE-2026-70230 | HIGH | 7 | 0.3% | Oct 13, 2026 | Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70229 | HIGH | 8.1 | 1.1% | Oct 13, 2026 | Incorrect authorization in Active Directory Domain Services allows an unauthorized attacker to execute code over a netwo... |
| CVE-2026-70228 | HIGH | 7.8 | 0.4% | Oct 13, 2026 | Out-of-bounds read in Desktop Window Manager allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70227 | MEDIUM | 5.5 | 0.5% | Oct 13, 2026 | Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally. |
| CVE-2026-70225 | HIGH | 7.8 | 0.4% | Oct 13, 2026 | Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an... |
| CVE-2026-70223 | HIGH | 7 | 0.3% | Oct 13, 2026 | Use after free in Windows Console Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70222 | HIGH | 7.8 | 0.4% | Oct 13, 2026 | Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally. |