CVE Vulnerability Database
Search and browse 424,261 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-110202 | HIGH | 8.8 | 0.3% | Oct 13, 2026 | Roo Code through 3.54.0 contains a command approval bypass vulnerability in getCommandDecision() that allows attackers t... |
| CVE-2026-110130 | CRITICAL | 10 | 0.6% | Oct 13, 2026 | Dockhand before 1.0.45 contains an authentication bypass in which the global auth hook skips authentication for any path... |
| CVE-2026-110112 | HIGH | 8.1 | 0.4% | Oct 13, 2026 | Dockhand before 1.0.50 contains a privilege escalation vulnerability that allows users from another tenant to gain admin... |
| CVE-2026-110111 | HIGH | 7.5 | 0.6% | Oct 13, 2026 | Xen Orchestra before 6.9.0 contains an improper access control vulnerability that allows any authenticated user to becom... |
| CVE-2026-110036 | LOW | 3.3 | 0.2% | Oct 13, 2026 | A flaw was found in device-mapper-persistent-data. A local attacker can cause a Denial of Service (DoS) by inducing a us... |
| CVE-2026-109453 | HIGH | 7 | 0.3% | Oct 13, 2026 | Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privilege... |
| CVE-2026-109429 | HIGH | 8.8 | 0.6% | Oct 13, 2026 | Mistral Vibe before 2.25.4 contains a command permission gate bypass vulnerability that allows attackers to execute arbi... |
| CVE-2026-109428 | HIGH | 8.8 | 0.5% | Oct 13, 2026 | Mistral Vibe before 2.25.5 contains a permission validation bypass vulnerability that allows attackers to execute unauth... |
| CVE-2026-108471 | HIGH | 8.8 | 0.4% | Oct 13, 2026 | Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to el... |
| CVE-2026-108468 | HIGH | 7 | 0.3% | Oct 13, 2026 | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
| CVE-2026-108467 | HIGH | 8.8 | 1.0% | Oct 13, 2026 | Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an authorized attacker to execute code over a n... |
| CVE-2026-108466 | MEDIUM | 5.3 | 0.7% | Oct 13, 2026 | Out-of-bounds read in Windows Kernel allows an unauthorized attacker to deny service over a network. |
| CVE-2026-108465 | HIGH | 7 | 0.3% | Oct 13, 2026 | Use after free in Windows Update Delivery Optimization allows an authorized attacker to elevate privileges locally. |
| CVE-2026-108464 | HIGH | 7 | 0.3% | Oct 13, 2026 | Use after free in Software Protection Platform (SPP) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-108463 | HIGH | 8.8 | 1.0% | Oct 13, 2026 | Improper resolution of path equivalence in Windows SmartScreen allows an unauthorized attacker to bypass a security feat... |
| CVE-2026-108462 | MEDIUM | 5.5 | 0.9% | Oct 13, 2026 | Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attack... |
| CVE-2026-108461 | HIGH | 7 | 0.3% | Oct 13, 2026 | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-108460 | HIGH | 8.1 | 0.8% | Oct 13, 2026 | Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network. |
| CVE-2026-108458 | HIGH | 8.8 | 0.9% | Oct 13, 2026 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
| CVE-2026-108457 | HIGH | 8.1 | 0.8% | Oct 13, 2026 | Out-of-bounds write in Microsoft Windows PDF allows an unauthorized attacker to execute code over a network. |
| CVE-2026-108400 | HIGH | 8.8 | — | Oct 13, 2026 | Integer overflow or wraparound in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over ... |
| CVE-2026-108399 | HIGH | 7.2 | 0.4% | Oct 13, 2026 | Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally. |
| CVE-2026-108398 | HIGH | 8.8 | — | Oct 13, 2026 | Untrusted search path in .NET Framework allows an authorized attacker to bypass a security feature locally. |
| CVE-2026-108396 | HIGH | 7 | 0.2% | Oct 13, 2026 | Time-of-check time-of-use (toctou) race condition in Windows Modern Device Management (MDM) allows an authorized attacke... |
| CVE-2026-108136 | HIGH | 7.8 | 0.3% | Oct 13, 2026 | Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |