CVE Database
Search and filter vulnerabilities by ID, vendor, product, severity, or description.
Search and filter vulnerabilities by ID, vendor, product, severity, or description.
| CVE ID | Severity | Score | Description | Published | |
|---|---|---|---|---|---|
| CVE-2026-83917 | HIGH | 7.0 | Use after free in Windows ALPC allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 | |
| CVE-2026-83916 | HIGH | 7.0 | Double free in Windows Error Reporting allows an authorized attacker to execute code locally. | Oct 13, 2026 | |
| CVE-2026-83915 | HIGH | 7.0 | Use after free in Windows Diagnostic Policy Service allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 | |
| CVE-2026-83914 | HIGH | 8.1 | Use after free in Microsoft XML allows an unauthorized attacker to execute code over a network. | Oct 13, 2026 | |
| CVE-2026-83913 | HIGH | 7.8 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 | |
| CVE-2026-83912 | HIGH | 7.8 | Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 | |
| CVE-2026-83911 | HIGH | 7.0 | Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 | |
| CVE-2026-83910 | CRITICAL | 9.8 | Out-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code over a network. | Oct 13, 2026 | |
| CVE-2026-83909 | MEDIUM | 4.7 | Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. | Oct 13, 2026 | |
| CVE-2026-83908 | HIGH | 7.0 | Release of invalid pointer or reference in RPC Runtime allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 | |
| CVE-2026-83907 | MEDIUM | 5.5 | Exposure of sensitive system information to an unauthorized control sphere in Windows Hello allows an authorized attacker to disclose information locally. | Oct 13, 2026 | |
| CVE-2026-83906 | MEDIUM | 6.5 | Incorrect implementation of authentication algorithm in Windows Shell allows an unauthorized attacker to perform spoofing over a network. | Oct 13, 2026 | |
| CVE-2026-83905 | MEDIUM | 4.7 | Exposure of sensitive system information to an unauthorized control sphere in Windows Shell allows an authorized attacker to disclose information locally. | Oct 13, 2026 | |
| CVE-2026-83904 | MEDIUM | 5.5 | Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally. | Oct 13, 2026 | |
| CVE-2026-83903 | HIGH | 7.8 | Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 | |
| CVE-2026-83902 | HIGH | 7.8 | Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 | |
| CVE-2026-83901 | HIGH | 7.0 | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 | |
| CVE-2026-83898 | MEDIUM | 5.5 | Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally. | Oct 13, 2026 | |
| CVE-2026-83892 | MEDIUM | 5.5 | Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally. | Oct 13, 2026 | |
| CVE-2026-83891 | HIGH | 8.8 | Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | Oct 13, 2026 | |
| CVE-2026-83887 | MEDIUM | 5.5 | Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally. | Oct 13, 2026 | |
| CVE-2026-83884 | MEDIUM | 5.5 | Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally. | Oct 13, 2026 | |
| CVE-2026-83877 | HIGH | 7.8 | Integer overflow or wraparound in HID Parser Library allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 | |
| CVE-2026-83875 | MEDIUM | 5.5 | Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally. | Oct 13, 2026 | |
| CVE-2026-83868 | HIGH | 7.0 | Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |