CVE Vulnerability Database
Search and browse 424,261 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-102196 | HIGH | 7.8 | 0.3% | Oct 13, 2026 | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-102195 | HIGH | 7 | 0.3% | Oct 13, 2026 | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-102194 | HIGH | 7 | 0.3% | Oct 13, 2026 | Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-102193 | HIGH | 7 | 0.3% | Oct 13, 2026 | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-102192 | HIGH | 7.5 | 1.1% | Oct 13, 2026 | Integer underflow (wrap or wraparound) in Windows Failover Cluster allows an unauthorized attacker to deny service over ... |
| CVE-2026-102191 | HIGH | 7 | 0.3% | Oct 13, 2026 | Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally. |
| CVE-2026-102189 | HIGH | 7 | 0.3% | Oct 13, 2026 | Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally. |
| CVE-2026-102188 | MEDIUM | 6.8 | 0.4% | Oct 13, 2026 | Untrusted pointer dereference in Windows Storage Port Driver allows an unauthorized attacker to elevate privileges with ... |
| CVE-2026-102187 | MEDIUM | 5.5 | 0.4% | Oct 13, 2026 | Use of uninitialized resource in Windows Kernel allows an authorized attacker to disclose information locally. |
| CVE-2026-102186 | MEDIUM | 4.7 | 0.3% | Oct 13, 2026 | Untrusted pointer dereference in Windows Network File System allows an authorized attacker to disclose information local... |
| CVE-2026-100225 | HIGH | 7 | 0.3% | Oct 13, 2026 | Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally. |
| CVE-2026-100222 | CRITICAL | 9.8 | 1.0% | Oct 13, 2026 | Heap-based buffer overflow in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network... |
| CVE-2026-100220 | HIGH | 8.8 | 0.8% | Oct 13, 2026 | Heap-based buffer overflow in Windows Media Video Decoder allows an unauthorized attacker to execute code over a network... |
| CVE-2026-100219 | CRITICAL | 9.8 | 1.1% | Oct 13, 2026 | Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network. |
| CVE-2026-100218 | HIGH | 8.1 | 0.7% | Oct 13, 2026 | Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network. |
| CVE-2026-100217 | HIGH | 7.8 | 0.3% | Oct 13, 2026 | Improper privilege management in Windows Group Policy allows an authorized attacker to elevate privileges locally. |
| CVE-2026-100216 | HIGH | 7 | 0.3% | Oct 13, 2026 | Stack-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally. |
| CVE-2026-100215 | HIGH | 7.8 | 0.5% | Oct 13, 2026 | Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code locally. |
| CVE-2026-100214 | HIGH | 8.8 | — | Oct 13, 2026 | Deserialization of untrusted data in Dynamics Business Central allows an authorized attacker to execute code over a netw... |
| CVE-2026-100212 | HIGH | 8.8 | 0.8% | Oct 13, 2026 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-100211 | HIGH | 8.8 | 0.8% | Oct 13, 2026 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-100210 | HIGH | 8.8 | 0.8% | Oct 13, 2026 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-100209 | HIGH | 8.8 | 0.8% | Oct 13, 2026 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-100207 | HIGH | 7.3 | 0.4% | Oct 13, 2026 | Improper neutralization of special elements used in an os command ('os command injection') in Azure CycleCloud allows an... |
| CVE-2026-100205 | HIGH | 7.1 | — | Oct 13, 2026 | Untrusted pointer dereference in SysInternals allows an authorized attacker to elevate privileges locally. |