Vulnerability intelligence

Explore. Understand.
Stay ahead.

A clearer way to explore known software vulnerabilities. Search CVE records, review severity and CVSS scores, and keep track of the issues that matter to you.

Independent vulnerability information and monitoring project

Search the vulnerability database

Find a CVE by ID, keyword, severity or CVSS score.

Centralized CVE data
Browse vulnerability records collected from public sources.
Severity at a glance
Compare severity levels and available CVSS scores.
Personal email alerts
Create alert preferences for critical issues and custom matches.
Browse the database

Latest vulnerability records

52 919
matching records · page 704 of 2117
CVE-2026-84020 HIGH CVSS 7.03.1

Use after free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 19 Oct 2026 View details →
CVE-2026-84019 HIGH CVSS 7.03.1

Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 19 Oct 2026 View details →
CVE-2026-84018 HIGH CVSS 7.03.1

Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 19 Oct 2026 View details →
CVE-2026-84017 HIGH CVSS 7.53.1

Null pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network.

Published: 13 Oct 2026 Updated: 19 Oct 2026 View details →
CVE-2026-84016 HIGH CVSS 7.83.1

Out-of-bounds write in Windows EAPHost Service allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 19 Oct 2026 View details →
CVE-2026-84015 CRITICAL CVSS 9.83.1

Heap-based buffer overflow in Remote Access Point-to-Point Protocol (PPP) EAP-TLS allows an unauthorized attacker to execute code over a network.

Published: 13 Oct 2026 Updated: 19 Oct 2026 View details →
CVE-2026-84014 HIGH CVSS 7.03.1

Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 19 Oct 2026 View details →
CVE-2026-84013 HIGH CVSS 7.83.1

Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 19 Oct 2026 View details →
CVE-2026-84012 HIGH CVSS 8.13.1

Double free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.

Published: 13 Oct 2026 Updated: 19 Oct 2026 View details →
CVE-2026-84011 MEDIUM CVSS 5.53.1

Incorrect authorization in Windows SMB Client allows an authorized attacker to bypass a security feature locally.

Published: 13 Oct 2026 Updated: 19 Oct 2026 View details →
CVE-2026-84009 MEDIUM CVSS 4.73.1

Time-of-check time-of-use (toctou) race condition in Windows Projected File System allows an authorized attacker to perform tampering locally.

Published: 13 Oct 2026 Updated: 19 Oct 2026 View details →
CVE-2026-84008 HIGH CVSS 7.53.1

Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.

Published: 13 Oct 2026 Updated: 22 Oct 2026 View details →
CVE-2026-84007 MEDIUM CVSS 6.53.1

Out-of-bounds read in Remote Desktop Gateway Service allows an authorized attacker to disclose information over a network.

Published: 13 Oct 2026 Updated: 19 Oct 2026 View details →
CVE-2026-83935 CRITICAL CVSS 9.83.1

Heap-based buffer overflow in Microsoft XML allows an unauthorized attacker to execute code over a network.

Published: 13 Oct 2026 Updated: 19 Oct 2026 View details →
CVE-2026-83934 HIGH CVSS 8.83.1

Stack-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network.

Published: 13 Oct 2026 Updated: 19 Oct 2026 View details →
CVE-2026-83933 MEDIUM CVSS 5.53.1

Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authorized attacker to disclose information locally.

Published: 13 Oct 2026 Updated: 29 Oct 2026 View details →
CVE-2026-83932 HIGH CVSS 7.83.1

Heap-based buffer overflow in Windows Group Policy allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 26 Oct 2026 View details →
CVE-2026-83931 HIGH CVSS 7.83.1

Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.

Published: 13 Oct 2026 Updated: 26 Oct 2026 View details →
CVE-2026-83930 HIGH CVSS 7.03.1

Use after free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 26 Oct 2026 View details →
CVE-2026-83929 HIGH CVSS 8.83.1

Out-of-bounds write in Windows GDI allows an unauthorized attacker to execute code over a network.

Published: 13 Oct 2026 Updated: 26 Oct 2026 View details →
CVE-2026-83928 HIGH CVSS 8.83.1

Out-of-bounds write in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to execute code over a network.

Published: 13 Oct 2026 Updated: 26 Oct 2026 View details →
CVE-2026-83927 HIGH CVSS 7.83.1

Improper link resolution before file access ('link following') in Windows Registry allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 26 Oct 2026 View details →
CVE-2026-83926 MEDIUM CVSS 4.43.1

Improper certificate validation in Windows Hello allows an authorized attacker to bypass a security feature locally.

Published: 13 Oct 2026 Updated: 26 Oct 2026 View details →
CVE-2026-83925 MEDIUM CVSS 4.73.1

Use of uninitialized resource in Windows Kernel allows an authorized attacker to disclose information locally.

Published: 13 Oct 2026 Updated: 26 Oct 2026 View details →
CVE-2026-83924 HIGH CVSS 7.03.1

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 26 Oct 2026 View details →