Vulnerability intelligence

Explore. Understand.
Stay ahead.

A clearer way to explore known software vulnerabilities. Search CVE records, review severity and CVSS scores, and keep track of the issues that matter to you.

Independent vulnerability information and monitoring project

Search the vulnerability database

Find a CVE by ID, keyword, severity or CVSS score.

Centralized CVE data
Browse vulnerability records collected from public sources.
Severity at a glance
Compare severity levels and available CVSS scores.
Personal email alerts
Create alert preferences for critical issues and custom matches.
Browse the database

Latest vulnerability records

52 918
matching records · page 702 of 2117
CVE-2026-85857 MEDIUM CVSS 5.53.1

Insertion of sensitive information into log file in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.

Published: 13 Oct 2026 Updated: 29 Oct 2026 View details →
CVE-2026-85856 HIGH CVSS 7.13.1

Heap-based buffer overflow in Windows Internet Connection Sharing (ICS) allows an authorized attacker to execute code over an adjacent network.

Published: 13 Oct 2026 Updated: 29 Oct 2026 View details →
CVE-2026-85855 HIGH CVSS 7.03.1

Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 29 Oct 2026 View details →
CVE-2026-85854 HIGH CVSS 7.03.1

Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 29 Oct 2026 View details →
CVE-2026-85853 HIGH CVSS 7.03.1

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 29 Oct 2026 View details →
CVE-2026-85852 MEDIUM CVSS 5.53.1

Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.

Published: 13 Oct 2026 Updated: 29 Oct 2026 View details →
CVE-2026-85851 HIGH CVSS 7.83.1

Use after free in Windows SmartScreen allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 29 Oct 2026 View details →
CVE-2026-85850 HIGH CVSS 7.83.1

Release of invalid pointer or reference in Windows Kernel allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 29 Oct 2026 View details →
CVE-2026-85849 HIGH CVSS 7.83.1

Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 29 Oct 2026 View details →
CVE-2026-85848 HIGH CVSS 7.83.1

Heap-based buffer overflow in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 29 Oct 2026 View details →
CVE-2026-85847 MEDIUM CVSS 6.53.1

Out-of-bounds read in Windows Print Spooler Components allows an unauthorized attacker to disclose information over a network.

Published: 13 Oct 2026 Updated: 29 Oct 2026 View details →
CVE-2026-85846 HIGH CVSS 7.03.1

Use after free in Windows Web Account Manager allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 29 Oct 2026 View details →
CVE-2026-85843 HIGH CVSS 7.83.1

Use of uninitialized resource in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 29 Oct 2026 View details →
CVE-2026-85842 HIGH CVSS 7.83.1

Use of externally-controlled format string in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 29 Oct 2026 View details →
CVE-2026-85841 MEDIUM CVSS 6.63.1

Use after free in Windows DHCP Server allows an authorized attacker to execute code over a network.

Published: 13 Oct 2026 Updated: 29 Oct 2026 View details →
CVE-2026-85840 MEDIUM CVSS 6.53.1

Files or directories accessible to external parties in Windows Event Viewer allows an authorized attacker to disclose information over a network.

Published: 13 Oct 2026 Updated: 29 Oct 2026 View details →
CVE-2026-85834 HIGH CVSS 7.03.1

Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 29 Oct 2026 View details →
CVE-2026-85833 HIGH CVSS 7.83.1

Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 29 Oct 2026 View details →
CVE-2026-85832 HIGH CVSS 7.83.1

Heap-based buffer overflow in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 29 Oct 2026 View details →
CVE-2026-85831 MEDIUM CVSS 5.53.1

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to disclose information locally.

Published: 13 Oct 2026 Updated: 29 Oct 2026 View details →
CVE-2026-85830 MEDIUM CVSS 5.53.1

Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locally.

Published: 13 Oct 2026 Updated: 29 Oct 2026 View details →
CVE-2026-85829 HIGH CVSS 7.83.1

Double free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 29 Oct 2026 View details →
CVE-2026-85828 HIGH CVSS 7.03.1

Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 29 Oct 2026 View details →
CVE-2026-85827 HIGH CVSS 7.03.1

Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 06 Nov 2026 View details →
CVE-2026-85790 MEDIUM CVSS 5.93.1

Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network.

Published: 13 Oct 2026 Updated: 22 Oct 2026 View details →