CVE Vulnerability Database
Search and browse 424,249 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-70156 | HIGH | 7 | 0.3% | Oct 13, 2026 | Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70155 | HIGH | 7.5 | 1.2% | Oct 13, 2026 | Missing release of memory after effective lifetime in Windows DNS allows an unauthorized attacker to deny service over a... |
| CVE-2026-70153 | CRITICAL | 9.8 | 1.1% | Oct 13, 2026 | Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over a... |
| CVE-2026-70151 | HIGH | 7.8 | 0.4% | Oct 13, 2026 | Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70150 | HIGH | 7 | 0.3% | Oct 13, 2026 | Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70149 | HIGH | 8.8 | 0.9% | Oct 13, 2026 | Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver (csc.sys) allows an aut... |
| CVE-2026-70148 | MEDIUM | 6.5 | 0.4% | Oct 13, 2026 | Improper authorization in Windows Broadcast DVR User Service allows an authorized attacker to disclose information local... |
| CVE-2026-70147 | CRITICAL | 9.8 | 1.1% | Oct 13, 2026 | Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over a... |
| CVE-2026-70144 | HIGH | 7 | 0.3% | Oct 13, 2026 | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70143 | HIGH | 7.8 | 0.4% | Oct 13, 2026 | Heap-based buffer overflow in Windows Network File System allows an authorized attacker to execute code locally. |
| CVE-2026-70142 | HIGH | 7.8 | 0.4% | Oct 13, 2026 | Untrusted search path in Windows Update Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70141 | MEDIUM | 5.5 | 0.4% | Oct 13, 2026 | Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally. |
| CVE-2026-70140 | HIGH | 7 | 0.3% | Oct 13, 2026 | Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70139 | HIGH | 7.8 | 0.4% | Oct 13, 2026 | Heap-based buffer overflow in Windows Update Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70138 | HIGH | 7.8 | 0.4% | Oct 13, 2026 | Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70137 | MEDIUM | 5.5 | 0.4% | Oct 13, 2026 | Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to disclose informatio... |
| CVE-2026-70136 | HIGH | 7 | 0.3% | Oct 13, 2026 | Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70135 | MEDIUM | 5.5 | 0.5% | Oct 13, 2026 | Out-of-bounds read in Windows Remote POS Driver allows an authorized attacker to disclose information locally. |
| CVE-2026-70134 | HIGH | 7 | 0.3% | Oct 13, 2026 | Use after free in Windows Event Tracing allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70133 | HIGH | 7.5 | 1.3% | Oct 13, 2026 | Allocation of resources without limits or throttling in Windows SMB Server allows an unauthorized attacker to deny servi... |
| CVE-2026-70132 | HIGH | 7.8 | 0.4% | Oct 13, 2026 | Heap-based buffer overflow in Windows Portable Device File System Driver allows an authorized attacker to elevate privil... |
| CVE-2026-70131 | HIGH | 7.8 | 0.5% | Oct 13, 2026 | Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to elevate privileges l... |
| CVE-2026-70128 | MEDIUM | 5.5 | 0.4% | Oct 13, 2026 | Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally. |
| CVE-2026-70127 | HIGH | 8.1 | 0.7% | Oct 13, 2026 | Use after free in DNS Server allows an unauthorized attacker to execute code over a network. |
| CVE-2026-70126 | HIGH | 7.1 | 0.5% | Oct 13, 2026 | Out-of-bounds read in Windows Bluetooth Port Driver allows an unauthorized attacker to execute code over an adjacent net... |