CVE Vulnerability Database

Search and browse 424,257 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.

CVE IDSeverityCVSSDescription
CVE-2026-69986HIGH7.5Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
CVE-2026-69985HIGH8.8Heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execute code over a network.
CVE-2026-69984HIGH7.5Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
CVE-2026-69982MEDIUM5.9Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to bypass a security...
CVE-2026-69979MEDIUM5.5Improper protection of alternate path in Windows AppX Deployment Service allows an authorized attacker to bypass a secur...
CVE-2026-69978MEDIUM5.5Null pointer dereference in Windows VMSwitch allows an authorized attacker to deny service locally.
CVE-2026-69977HIGH7Use after free in Quality Windows Audio/Video Experience (QWAVE) service allows an authorized attacker to elevate privil...
CVE-2026-69976HIGH7.5Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
CVE-2026-69974MEDIUM4.7Out-of-bounds read in Desktop Window Manager allows an authorized attacker to disclose information locally.
CVE-2026-69973MEDIUM6.5Improper limitation of a pathname to a restricted directory ('path traversal') in Windows Libarchive allows an unauthori...
CVE-2026-69971MEDIUM5.5Incorrect authorization in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.
CVE-2026-69970HIGH7Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69969MEDIUM4.7Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized a...
CVE-2026-69968MEDIUM6.5Relative path traversal in Windows Libarchive allows an unauthorized attacker to perform tampering over a network.
CVE-2026-69967MEDIUM5.5Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to disclose information locally.
CVE-2026-69966HIGH7.8Integer overflow or wraparound in Microsoft Streaming Service allows an authorized attacker to elevate privileges locall...
CVE-2026-69964HIGH7Use after free in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69963HIGH7.8Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69959HIGH7.8Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to execute code locally.
CVE-2026-69958MEDIUM6.8Heap-based buffer overflow in Windows Overlay Filter allows an unauthorized attacker to execute code with a physical att...
CVE-2026-69957HIGH7.8Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
CVE-2026-69955MEDIUM6.5Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information over a network.
CVE-2026-69954MEDIUM5.5Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally.
CVE-2026-69953HIGH7.8Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
CVE-2026-69952HIGH7.8Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.