Vulnerability intelligence

Explore. Understand.
Stay ahead.

A clearer way to explore known software vulnerabilities. Search CVE records, review severity and CVSS scores, and keep track of the issues that matter to you.

Independent vulnerability information and monitoring project

Search the vulnerability database

Find a CVE by ID, keyword, severity or CVSS score.

Centralized CVE data
Browse vulnerability records collected from public sources.
Severity at a glance
Compare severity levels and available CVSS scores.
Personal email alerts
Create alert preferences for critical issues and custom matches.
Browse the database

Latest vulnerability records

52 918
matching records · page 700 of 2117
CVE-2026-87704 HIGH CVSS 7.03.1

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-87702 HIGH CVSS 7.83.1

Integer overflow or wraparound in Windows Resource Management (MRM) allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-87700 HIGH CVSS 7.83.1

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-87699 HIGH CVSS 7.83.1

Heap-based buffer overflow in Winlogon allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 27 Oct 2026 View details →
CVE-2026-87698 MEDIUM CVSS 5.53.1

Out-of-bounds read in Windows Remote Access Service Infrastructure allows an authorized attacker to disclose information locally.

Published: 13 Oct 2026 Updated: 27 Oct 2026 View details →
CVE-2026-87697 HIGH CVSS 8.83.1

Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network.

Published: 13 Oct 2026 Updated: 22 Oct 2026 View details →
CVE-2026-87696 HIGH CVSS 7.53.1

Improper verification of cryptographic signature in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.

Published: 13 Oct 2026 Updated: 27 Oct 2026 View details →
CVE-2026-87695 HIGH CVSS 7.83.1

Inclusion of functionality from untrusted control sphere in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 27 Oct 2026 View details →
CVE-2026-87694 HIGH CVSS 7.83.1

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 27 Oct 2026 View details →
CVE-2026-87693 HIGH CVSS 7.03.1

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-87692 HIGH CVSS 7.83.1

Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 29 Oct 2026 View details →
CVE-2026-87691 HIGH CVSS 7.83.1

Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-85945 HIGH CVSS 7.83.1

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-85943 HIGH CVSS 7.03.1

Time-of-check time-of-use (toctou) race condition in Reliable Multicast Transport Driver (RMCAST) allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 29 Oct 2026 View details →
CVE-2026-85941 HIGH CVSS 7.03.1

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-85939 MEDIUM CVSS 5.33.1

Weak authentication in Windows Kernel allows an authorized attacker to bypass a security feature over a network.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-85938 MEDIUM CVSS 5.53.1

Improper access control in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-85936 HIGH CVSS 8.83.1

Double free in Windows Shell allows an unauthorized attacker to execute code over a network.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-85935 MEDIUM CVSS 5.53.1

Buffer over-read in Windows USB Driver allows an authorized attacker to disclose information locally.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-85934 HIGH CVSS 7.03.1

Use after free in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-85933 HIGH CVSS 7.83.1

Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-85931 HIGH CVSS 8.83.1

Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-85930 HIGH CVSS 7.03.1

Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-85928 CRITICAL CVSS 9.83.1

Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-85927 HIGH CVSS 7.83.1

Heap-based buffer overflow in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →