CVE Vulnerability Database
Search and browse 424,261 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-103558 | HIGH | 7.5 | 1.0% | Oct 13, 2026 | Deadlock in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a netw... |
| CVE-2026-103555 | HIGH | 7 | 0.3% | Oct 13, 2026 | Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privilege... |
| CVE-2026-103554 | HIGH | 7 | 0.3% | Oct 13, 2026 | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-103553 | HIGH | 7.8 | 0.4% | Oct 13, 2026 | Out-of-bounds read in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-102870 | HIGH | 8.8 | 0.9% | Oct 13, 2026 | Improper control of generation of code ('code injection') in ASP.NET Core allows an unauthorized attacker to execute cod... |
| CVE-2026-102869 | HIGH | 8.8 | — | Oct 13, 2026 | Access of resource using incompatible type ('type confusion') in .NET and Visual Studio allows an unauthorized attacker ... |
| CVE-2026-102867 | MEDIUM | 6.5 | 0.9% | Oct 13, 2026 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-102866 | HIGH | 8.1 | 0.6% | Oct 13, 2026 | Improper verification of cryptographic signature in Microsoft Office SharePoint allows an unauthorized attacker to eleva... |
| CVE-2026-102865 | MEDIUM | 6.5 | 0.8% | Oct 13, 2026 | Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to disclose information over a netw... |
| CVE-2026-102864 | MEDIUM | 4.6 | 0.4% | Oct 13, 2026 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allo... |
| CVE-2026-102863 | HIGH | 8.8 | 0.9% | Oct 13, 2026 | Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker t... |
| CVE-2026-102862 | HIGH | 8.8 | 0.7% | Oct 13, 2026 | Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a networ... |
| CVE-2026-102861 | HIGH | 8.8 | 0.7% | Oct 13, 2026 | Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-102860 | HIGH | 8.8 | 0.7% | Oct 13, 2026 | Improper access control in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a networ... |
| CVE-2026-102859 | MEDIUM | 4.6 | 0.4% | Oct 13, 2026 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allo... |
| CVE-2026-102858 | HIGH | 8.8 | 0.7% | Oct 13, 2026 | Heap-based buffer overflow in Microsoft Office OneNote allows an unauthorized attacker to execute code over a network. |
| CVE-2026-102857 | HIGH | 8.8 | 0.8% | Oct 13, 2026 | Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network. |
| CVE-2026-102856 | HIGH | 8.8 | 0.8% | Oct 13, 2026 | Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network. |
| CVE-2026-102851 | MEDIUM | 6.1 | 0.3% | Oct 13, 2026 | Incorrect privilege assignment in Visual Studio Code allows an authorized attacker to bypass a security feature locally. |
| CVE-2026-102850 | HIGH | 8.8 | 0.6% | Oct 13, 2026 | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. |
| CVE-2026-102849 | HIGH | 8.8 | 0.6% | Oct 13, 2026 | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. |
| CVE-2026-102599 | HIGH | 7.5 | 0.6% | Oct 13, 2026 | Socket.IO enables bidirectional and low-latency communication for every platform. From Engine.IO 6.6.0 until 6.6.10, a t... |
| CVE-2026-102233 | HIGH | 7.8 | 0.4% | Oct 13, 2026 | Missing authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally. |
| CVE-2026-102232 | HIGH | 7 | 0.3% | Oct 13, 2026 | Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally. |
| CVE-2026-102231 | HIGH | 7.7 | 0.4% | Oct 13, 2026 | Improper resolution of path equivalence in Visual Studio Code allows an unauthorized attacker to bypass a security featu... |