Vulnerability intelligence

Explore. Understand.
Stay ahead.

A clearer way to explore known software vulnerabilities. Search CVE records, review severity and CVSS scores, and keep track of the issues that matter to you.

Independent vulnerability information and monitoring project

Search the vulnerability database

Find a CVE by ID, keyword, severity or CVSS score.

Centralized CVE data
Browse vulnerability records collected from public sources.
Severity at a glance
Compare severity levels and available CVSS scores.
Personal email alerts
Create alert preferences for critical issues and custom matches.
Browse the database

Latest vulnerability records

52 919
matching records · page 703 of 2117
CVE-2026-85790 MEDIUM CVSS 5.93.1

Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network.

Published: 13 Oct 2026 Updated: 22 Oct 2026 View details →
CVE-2026-85369 HIGH CVSS 8.83.1

Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-85368 HIGH CVSS 7.83.1

Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-85367 HIGH CVSS 7.03.1

Use after free in Windows Cash Drawer Protocol Provider allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-85366 HIGH CVSS 7.83.1

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-85364 HIGH CVSS 7.03.1

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-85363 HIGH CVSS 8.83.1

Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to elevate privileges over a network.

Published: 13 Oct 2026 Updated: 22 Oct 2026 View details →
CVE-2026-85362 HIGH CVSS 7.03.1

Release of invalid pointer or reference in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-85361 HIGH CVSS 7.03.1

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-85359 HIGH CVSS 7.83.1

Improper control of generation of code ('code injection') in Windows Performance Monitor allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-85358 HIGH CVSS 7.83.1

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-85357 HIGH CVSS 7.03.1

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Phone Service allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-85356 HIGH CVSS 7.83.1

Out-of-bounds read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-85355 HIGH CVSS 7.03.1

Inclusion of functionality from untrusted control sphere in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-85354 HIGH CVSS 7.03.1

Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-85353 HIGH CVSS 7.53.1

Out-of-bounds read in Windows Print Spooler Components allows an unauthorized attacker to disclose information over a network.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-85352 HIGH CVSS 7.03.1

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-85343 HIGH CVSS 7.83.1

Improper link resolution before file access ('link following') in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-85342 HIGH CVSS 7.03.1

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-85341 HIGH CVSS 7.83.1

Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-85339 HIGH CVSS 8.83.1

Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-85321 HIGH CVSS 7.53.1

Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.

Published: 13 Oct 2026 Updated: 29 Oct 2026 View details →
CVE-2026-85320 MEDIUM CVSS 5.53.1

Use of uninitialized resource in Windows Print Spooler Components allows an authorized attacker to disclose information locally.

Published: 13 Oct 2026 Updated: 29 Oct 2026 View details →
CVE-2026-85319 HIGH CVSS 7.53.1

Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.

Published: 13 Oct 2026 Updated: 29 Oct 2026 View details →
CVE-2026-85318 HIGH CVSS 7.83.1

Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 29 Oct 2026 View details →