CVE Vulnerability Database
Search and browse 424,249 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-70089 | HIGH | 8.8 | 0.9% | Oct 13, 2026 | Heap-based buffer overflow in Windows GDI allows an unauthorized attacker to execute code over a network. |
| CVE-2026-70087 | MEDIUM | 5.5 | 0.3% | Oct 13, 2026 | Incorrect authorization in DNS Server allows an authorized attacker to bypass a security feature locally. |
| CVE-2026-70086 | HIGH | 7 | 0.3% | Oct 13, 2026 | Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70085 | MEDIUM | 5.5 | 0.3% | Oct 13, 2026 | Missing authorization in DNS Server allows an authorized attacker to perform tampering locally. |
| CVE-2026-70084 | MEDIUM | 5.5 | 0.5% | Oct 13, 2026 | Improper access control in Windows Projected File System allows an authorized attacker to disclose information locally. |
| CVE-2026-70083 | MEDIUM | 5.5 | 0.3% | Oct 13, 2026 | Incorrect authorization in DNS Server allows an authorized attacker to perform tampering locally. |
| CVE-2026-70082 | HIGH | 7.5 | 1.2% | Oct 13, 2026 | Uncaught exception in Windows DNS allows an unauthorized attacker to deny service over a network. |
| CVE-2026-70079 | HIGH | 7.5 | 1.1% | Oct 13, 2026 | Improper enforcement of behavioral workflow in Windows DNS allows an unauthorized attacker to deny service over a networ... |
| CVE-2026-70077 | MEDIUM | 4.7 | 0.4% | Oct 13, 2026 | Use after free in Windows Kernel allows an authorized attacker to disclose information locally. |
| CVE-2026-70076 | HIGH | 7 | 0.3% | Oct 13, 2026 | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70075 | MEDIUM | 4.4 | 0.3% | Oct 13, 2026 | Time-of-check time-of-use (toctou) race condition in Windows Virtualization-Based Security (VBS) Enclave allows an autho... |
| CVE-2026-70074 | MEDIUM | 5.5 | 0.4% | Oct 13, 2026 | Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information locally. |
| CVE-2026-70072 | MEDIUM | 6.5 | 1.2% | Oct 13, 2026 | Allocation of resources without limits or throttling in Windows Netlogon allows an authorized attacker to deny service o... |
| CVE-2026-70071 | MEDIUM | 5.5 | 0.2% | Oct 13, 2026 | Improper verification of cryptographic signature in DNS Server allows an authorized attacker to perform tampering locall... |
| CVE-2026-70069 | HIGH | 8.8 | 1.0% | Oct 13, 2026 | Stack-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over a network. |
| CVE-2026-70068 | HIGH | 8.8 | 0.9% | Oct 13, 2026 | Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an unauthorized attacker to elevate privi... |
| CVE-2026-70067 | HIGH | 7 | 0.3% | Oct 13, 2026 | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70066 | HIGH | 7 | 0.3% | Oct 13, 2026 | Use after free in Windows DHCP Server allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70064 | HIGH | 7.8 | 0.4% | Oct 13, 2026 | Integer underflow (wrap or wraparound) in Windows Kerberos allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70063 | MEDIUM | 4.7 | 0.4% | Oct 13, 2026 | Out-of-bounds read in Windows Kernel allows an authorized attacker to disclose information locally. |
| CVE-2026-70062 | HIGH | 8.1 | 0.8% | Oct 13, 2026 | Double free in Windows Libarchive allows an unauthorized attacker to execute code over a network. |
| CVE-2026-70060 | HIGH | 7.8 | 0.4% | Oct 13, 2026 | Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally... |
| CVE-2026-70059 | HIGH | 7.8 | 0.4% | Oct 13, 2026 | Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70058 | HIGH | 7.5 | 1.4% | Oct 13, 2026 | Out-of-bounds write in Windows DHCP Server allows an unauthorized attacker to execute code over a network. |
| CVE-2026-70057 | MEDIUM | 5.5 | 0.3% | Oct 13, 2026 | Incorrect authorization in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to bypass a se... |