CVE Vulnerability Database
Search and browse 424,261 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-102229 | MEDIUM | 6.8 | 1.1% | Oct 13, 2026 | Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an authorize... |
| CVE-2026-102227 | HIGH | 7.8 | 0.4% | Oct 13, 2026 | Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally... |
| CVE-2026-102226 | HIGH | 8.8 | — | Oct 13, 2026 | Improper limitation of a pathname to a restricted directory ('path traversal') in Dynamics Business Central allows an au... |
| CVE-2026-102225 | HIGH | 8.8 | 0.9% | Oct 13, 2026 | Out-of-bounds read in Windows Text Shaping allows an unauthorized attacker to execute code over a network. |
| CVE-2026-102221 | MEDIUM | 4.4 | 0.4% | Oct 13, 2026 | No cwe for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feature locally. |
| CVE-2026-102220 | HIGH | 7.8 | 0.4% | Oct 13, 2026 | Use after free in Windows VHD miniport driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-102218 | HIGH | 7.8 | 0.4% | Oct 13, 2026 | Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to e... |
| CVE-2026-102217 | HIGH | 8.8 | 1.1% | Oct 13, 2026 | Improper resolution of path equivalence in WebDAV allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-102216 | HIGH | 7.8 | 0.3% | Oct 13, 2026 | Access of resource using incompatible type ('type confusion') in Windows StateRepository API allows an authorized attack... |
| CVE-2026-102215 | HIGH | 7.8 | 0.3% | Oct 13, 2026 | Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to e... |
| CVE-2026-102214 | HIGH | 8.8 | 0.3% | Oct 13, 2026 | Use after free in Windows Hyper-V allows an authorized attacker to execute code locally. |
| CVE-2026-102211 | HIGH | 7 | 0.2% | Oct 13, 2026 | Use after free in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privilege... |
| CVE-2026-102210 | CRITICAL | 9.8 | 0.9% | Oct 13, 2026 | Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network. |
| CVE-2026-102209 | HIGH | 7 | 0.2% | Oct 13, 2026 | Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally. |
| CVE-2026-102208 | HIGH | 7 | 0.3% | Oct 13, 2026 | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. |
| CVE-2026-102207 | HIGH | 7 | 0.2% | Oct 13, 2026 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an ... |
| CVE-2026-102206 | MEDIUM | 6.8 | 0.4% | Oct 13, 2026 | Heap-based buffer overflow in Windows Portable Device MTP Driver allows an unauthorized attacker to elevate privileges w... |
| CVE-2026-102205 | HIGH | 7.8 | 0.3% | Oct 13, 2026 | Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to e... |
| CVE-2026-102204 | HIGH | 7.8 | 0.3% | Oct 13, 2026 | Improper link resolution before file access ('link following') in Windows Subsystem for Linux allows an authorized attac... |
| CVE-2026-102203 | HIGH | 8.8 | 0.8% | Oct 13, 2026 | Access of resource using incompatible type ('type confusion') in RPC Runtime allows an unauthorized attacker to execute ... |
| CVE-2026-102202 | HIGH | 7.8 | 0.4% | Oct 13, 2026 | Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to e... |
| CVE-2026-102201 | HIGH | 7.8 | 0.3% | Oct 13, 2026 | Use after free in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally. |
| CVE-2026-102199 | MEDIUM | 6.5 | 0.9% | Oct 13, 2026 | Stack-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to deny service over a n... |
| CVE-2026-102198 | MEDIUM | 5.3 | 0.7% | Oct 13, 2026 | Out-of-bounds read in Windows Remote Desktop Protocol allows an authorized attacker to disclose information over a netwo... |
| CVE-2026-102197 | HIGH | 7 | 0.3% | Oct 13, 2026 | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. |