CVE Vulnerability Database
Search and browse 424,257 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-69651 | HIGH | 7.5 | 1.1% | Oct 13, 2026 | Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network. |
| CVE-2026-69650 | HIGH | 7.8 | 0.3% | Oct 13, 2026 | Improper verification of cryptographic signature in Windows Key Distribution Center allows an authorized attacker to ele... |
| CVE-2026-69644 | MEDIUM | 5.5 | 1.0% | Oct 13, 2026 | Exposure of sensitive system information to an unauthorized control sphere in Windows iSCSI allows an authorized attacke... |
| CVE-2026-69640 | MEDIUM | 5.3 | 0.7% | Oct 13, 2026 | Incorrect authorization in Windows Key Distribution Center allows an authorized attacker to bypass a security feature ov... |
| CVE-2026-69639 | CRITICAL | 9.8 | 1.0% | Oct 13, 2026 | Heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69635 | MEDIUM | 6.6 | 0.5% | Oct 13, 2026 | Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges with a physical atta... |
| CVE-2026-69634 | CRITICAL | 9.8 | 1.0% | Oct 13, 2026 | Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69633 | HIGH | 7.8 | 0.4% | Oct 13, 2026 | Heap-based buffer overflow in Windows Update allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69596 | HIGH | 7 | 0.3% | Oct 13, 2026 | Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges lo... |
| CVE-2026-69577 | HIGH | 7.5 | 1.1% | Oct 13, 2026 | Out-of-bounds read in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized a... |
| CVE-2026-69521 | HIGH | 8.8 | 0.7% | Oct 13, 2026 | Integer overflow or wraparound in Windows iSCSI allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69506 | MEDIUM | 4.7 | 0.3% | Oct 13, 2026 | Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally. |
| CVE-2026-69471 | HIGH | 7.8 | 0.3% | Oct 13, 2026 | Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69454 | HIGH | 7.5 | — | Oct 13, 2026 | Out-of-bounds read in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized a... |
| CVE-2026-69452 | HIGH | 7.1 | 0.6% | Oct 13, 2026 | Use after free in Windows Enterprise App Management allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-69387 | HIGH | 7 | 0.3% | Oct 13, 2026 | Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69370 | HIGH | 8.8 | 0.9% | Oct 13, 2026 | Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unau... |
| CVE-2026-69363 | HIGH | 8 | 0.6% | Oct 13, 2026 | Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network... |
| CVE-2026-69354 | HIGH | 7.8 | 0.3% | Oct 13, 2026 | Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69326 | HIGH | 8.8 | 0.6% | Oct 13, 2026 | Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network. |
| CVE-2026-68836 | HIGH | 7.8 | 0.3% | Oct 13, 2026 | Heap-based buffer overflow in Windows kernel32.dll allows an authorized attacker to elevate privileges locally. |
| CVE-2026-66822 | MEDIUM | 5.9 | 0.7% | Oct 13, 2026 | Insertion of sensitive information into sent data in .NET allows an unauthorized attacker to disclose information over a... |
| CVE-2026-62879 | MEDIUM | 5.5 | 0.4% | Oct 13, 2026 | Missing authentication for critical function in Windows SmartScreen allows an authorized attacker to perform tampering l... |
| CVE-2026-62687 | MEDIUM | 5.5 | 0.5% | Oct 13, 2026 | Improper link resolution before file access ('link following') in Windows Backup Engine allows an authorized attacker to... |
| CVE-2026-61931 | HIGH | 7.8 | 0.4% | Oct 13, 2026 | Use after free in Windows Perception Simulation Service allows an authorized attacker to elevate privileges locally. |