CVE Database
Search and filter vulnerabilities by ID, vendor, product, severity, or description.
Search and filter vulnerabilities by ID, vendor, product, severity, or description.
| CVE ID | Severity | Score | Description | Published | |
|---|---|---|---|---|---|
| CVE-2026-83586 | HIGH | 7.8 | Weak authentication in Windows Resilient File System (ReFS) Deduplication Service allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 | |
| CVE-2026-83583 | HIGH | 7.8 | Improper access control in Windows Geotag Broker allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 | |
| CVE-2026-83580 | HIGH | 7.0 | Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 | |
| CVE-2026-83578 | CRITICAL | 9.8 | Integer underflow (wrap or wraparound) in Windows PowerShell allows an unauthorized attacker to execute code over a network. | Oct 13, 2026 | |
| CVE-2026-83571 | MEDIUM | 5.5 | Null pointer dereference in Windows Audio Service allows an authorized attacker to disclose information locally. | Oct 13, 2026 | |
| CVE-2026-83569 | HIGH | 7.8 | Heap-based buffer overflow in HID Parser Library allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 | |
| CVE-2026-83564 | HIGH | 7.0 | Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 | |
| CVE-2026-83523 | HIGH | 8.8 | Heap-based buffer overflow in Windows Image Acquisition allows an unauthorized attacker to execute code over a network. | Oct 13, 2026 | |
| CVE-2026-83522 | HIGH | 8.1 | Reliance on untrusted inputs in a security decision in Windows IKE Extension allows an unauthorized attacker to perform spoofing over a network. | Oct 13, 2026 | |
| CVE-2026-83521 | MEDIUM | 6.5 | Out-of-bounds read in Windows IKE Extension allows an authorized attacker to disclose information over a network. | Oct 13, 2026 | |
| CVE-2026-83519 | CRITICAL | 9.8 | Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network. | Oct 13, 2026 | |
| CVE-2026-83518 | HIGH | 7.8 | Heap-based buffer overflow in RPC Runtime allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 | |
| CVE-2026-83517 | CRITICAL | 9.8 | Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. | Oct 13, 2026 | |
| CVE-2026-83516 | HIGH | 7.5 | Out-of-bounds read in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to deny service over a network. | Oct 13, 2026 | |
| CVE-2026-83515 | MEDIUM | 6.5 | Use of uninitialized resource in RPC Runtime allows an unauthorized attacker to disclose information over a network. | Oct 13, 2026 | |
| CVE-2026-83514 | HIGH | 7.8 | Heap-based buffer overflow in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 | |
| CVE-2026-83513 | HIGH | 7.8 | Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 | |
| CVE-2026-77902 | HIGH | 8.8 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | Oct 13, 2026 | |
| CVE-2026-70302 | HIGH | 8.8 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | Oct 13, 2026 | |
| CVE-2026-70301 | HIGH | 8.8 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | Oct 13, 2026 | |
| CVE-2026-70300 | CRITICAL | 9.8 | Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | Oct 13, 2026 | |
| CVE-2026-70298 | MEDIUM | 6.5 | Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network. | Oct 13, 2026 | |
| CVE-2026-70291 | CRITICAL | 9.8 | Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. | Oct 13, 2026 | |
| CVE-2026-70287 | HIGH | 8.8 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | Oct 13, 2026 | |
| CVE-2026-70282 | HIGH | 8.8 | Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. | Oct 13, 2026 |