Vulnerability intelligence

Explore. Understand.
Stay ahead.

A clearer way to explore known software vulnerabilities. Search CVE records, review severity and CVSS scores, and keep track of the issues that matter to you.

Independent vulnerability information and monitoring project

Search the vulnerability database

Find a CVE by ID, keyword, severity or CVSS score.

Centralized CVE data
Browse vulnerability records collected from public sources.
Severity at a glance
Compare severity levels and available CVSS scores.
Personal email alerts
Create alert preferences for critical issues and custom matches.
Browse the database

Latest vulnerability records

52 918
matching records · page 699 of 2117
CVE-2026-88137 MEDIUM CVSS 6.53.1

Files or directories accessible to external parties in WebDAV allows an authorized attacker to disclose information over a network.

Published: 13 Oct 2026 Updated: 31 Oct 2026 View details →
CVE-2026-88136 HIGH CVSS 8.83.1

Improper resolution of path equivalence in WebDAV allows an authorized attacker to execute code over a network.

Published: 13 Oct 2026 Updated: 06 Nov 2026 View details →
CVE-2026-88135 HIGH CVSS 7.83.1

Improper access control in WebDAV allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 06 Nov 2026 View details →
CVE-2026-88134 HIGH CVSS 7.83.1

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-88133 HIGH CVSS 7.83.1

Improper authorization in Windows Portable Device Enumerator Service allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-88128 HIGH CVSS 7.83.1

Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-88127 HIGH CVSS 7.03.1

Use after free in Windows SMB Server allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-88126 HIGH CVSS 7.83.1

Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 06 Nov 2026 View details →
CVE-2026-88124 HIGH CVSS 7.03.1

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-88121 HIGH CVSS 8.83.1

Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-88120 HIGH CVSS 8.13.1

Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-88119 HIGH CVSS 8.13.1

Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-88118 HIGH CVSS 7.83.1

Integer overflow or wraparound in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-88117 HIGH CVSS 8.13.1

Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-88115 HIGH CVSS 8.83.1

Out-of-bounds read in Windows Server for NFS allows an unauthorized attacker to execute code over a network.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-88113 HIGH CVSS 7.03.1

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-88110 HIGH CVSS 7.03.1

Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-88107 HIGH CVSS 7.03.1

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-88106 HIGH CVSS 7.03.1

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-88094 HIGH CVSS 8.13.1

Improper neutralization of special elements in output used by a downstream component ('injection') in Azure Storage Library allows an authorized attacker to elevate privileges over a network.

Published: 13 Oct 2026 Updated: 03 Nov 2026 View details →
CVE-2026-87709 MEDIUM CVSS 5.53.1

Improper access control in Windows Host Guardian Service allows an authorized attacker to perform tampering locally.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-87708 HIGH CVSS 7.03.1

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-87707 HIGH CVSS 7.83.1

Heap-based buffer overflow in Windows Fax and Scan Service allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-87706 HIGH CVSS 7.83.1

Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-87705 HIGH CVSS 7.43.1

Improper verification of source of a communication channel in Windows Hyper-V allows an unauthorized attacker to bypass a security feature over an adjacent network.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →