CVE Vulnerability Database
Search and browse 424,257 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-69883 | CRITICAL | 9.8 | 0.8% | Oct 13, 2026 | Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69882 | HIGH | 7.8 | 0.4% | Oct 13, 2026 | Untrusted search path in Windows Update allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69880 | HIGH | 7.8 | 0.4% | Oct 13, 2026 | Access of resource using incompatible type ('type confusion') in Desktop Window Manager allows an authorized attacker to... |
| CVE-2026-69877 | MEDIUM | 6.5 | — | Oct 13, 2026 | Origin validation error in Azure DevOps allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-69867 | HIGH | 7.8 | 0.4% | Oct 13, 2026 | Out-of-bounds read in SQLite allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69856 | HIGH | 7 | 0.2% | Oct 13, 2026 | Use after free in Windows Storage allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69850 | HIGH | 7.8 | 0.4% | Oct 13, 2026 | Untrusted pointer dereference in Windows Certificates allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69840 | HIGH | 7 | 0.3% | Oct 13, 2026 | Use after free in Windows Certificates allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69830 | HIGH | 8.1 | 0.5% | Oct 13, 2026 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DHCP Server allow... |
| CVE-2026-69802 | HIGH | 8.1 | 0.6% | Oct 13, 2026 | Weak authentication in Network Device Enrollment Service (NDES) allows an unauthorized attacker to execute code over a n... |
| CVE-2026-69798 | HIGH | 7.8 | 0.4% | Oct 13, 2026 | Use after free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69795 | HIGH | 7 | 0.3% | Oct 13, 2026 | Null pointer dereference in Windows Clipboard Server allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69789 | HIGH | 7.5 | 0.5% | Oct 13, 2026 | Heap-based buffer overflow in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute co... |
| CVE-2026-69783 | HIGH | 7.8 | 0.5% | Oct 13, 2026 | External control of file name or path in Windows Update allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69766 | HIGH | 7 | 0.2% | Oct 13, 2026 | Use after free in Windows Storage allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69765 | HIGH | 8.8 | 0.8% | Oct 13, 2026 | Use after free in Windows Storport Miniport Driver allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69763 | HIGH | 7 | 0.2% | Oct 13, 2026 | Use after free in Windows Storage allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69743 | HIGH | 7 | 0.3% | Oct 13, 2026 | Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges lo... |
| CVE-2026-69736 | HIGH | 7 | 0.2% | Oct 13, 2026 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Credential Manage... |
| CVE-2026-69733 | HIGH | 7.8 | 0.4% | Oct 13, 2026 | Untrusted search path in Windows Update allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69721 | MEDIUM | 5.5 | 0.5% | Oct 13, 2026 | Out-of-bounds read in Windows iSCSI allows an authorized attacker to disclose information locally. |
| CVE-2026-69718 | HIGH | 7.8 | 1.0% | Oct 13, 2026 | Improper neutralization of special elements used in a command ('command injection') in Windows Update allows an authoriz... |
| CVE-2026-69705 | CRITICAL | 9.8 | 1.0% | Oct 13, 2026 | Out-of-bounds write in Windows iSCSI allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69675 | MEDIUM | 5.5 | 0.5% | Oct 13, 2026 | Out-of-bounds read in Windows Network File System allows an authorized attacker to disclose information locally. |
| CVE-2026-69673 | HIGH | 7.8 | 0.5% | Oct 13, 2026 | Improper link resolution before file access ('link following') in Windows Update allows an authorized attacker to elevat... |