Vulnerability intelligence

Explore. Understand.
Stay ahead.

A clearer way to explore known software vulnerabilities. Search CVE records, review severity and CVSS scores, and keep track of the issues that matter to you.

Independent vulnerability information and monitoring project

Search the vulnerability database

Find a CVE by ID, keyword, severity or CVSS score.

Centralized CVE data
Browse vulnerability records collected from public sources.
Severity at a glance
Compare severity levels and available CVSS scores.
Personal email alerts
Create alert preferences for critical issues and custom matches.
Browse the database

Latest vulnerability records

52 919
matching records · page 713 of 2117
CVE-2026-83672 MEDIUM CVSS 4.73.1

Exposure of sensitive system information to an unauthorized control sphere in Windows Installer allows an authorized attacker to disclose information locally.

Published: 13 Oct 2026 Updated: 29 Oct 2026 View details →
CVE-2026-83671 MEDIUM CVSS 6.53.1

Out-of-bounds read in Windows Hyper-V allows an authorized attacker to disclose information locally.

Published: 13 Oct 2026 Updated: 29 Oct 2026 View details →
CVE-2026-83670 HIGH CVSS 7.53.1

Out-of-bounds read in Function Discovery Service (fdwsd.dll) allows an unauthorized attacker to disclose information over a network.

Published: 13 Oct 2026 Updated: 29 Oct 2026 View details →
CVE-2026-83669 HIGH CVSS 7.83.1

Use of uninitialized resource in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 29 Oct 2026 View details →
CVE-2026-83668 MEDIUM CVSS 5.53.1

Out-of-bounds read in Windows WLAN Service allows an authorized attacker to disclose information locally.

Published: 13 Oct 2026 Updated: 29 Oct 2026 View details →
CVE-2026-83667 MEDIUM CVSS 6.53.1

Out-of-bounds read in Active Directory Domain Services allows an authorized attacker to deny service over a network.

Published: 13 Oct 2026 Updated: 29 Oct 2026 View details →
CVE-2026-83666 HIGH CVSS 7.03.1

Concurrent execution using shared resource with improper synchronization ('race condition') in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 29 Oct 2026 View details →
CVE-2026-83665 HIGH CVSS 7.53.1

Null pointer dereference in Windows DHCP Server allows an unauthorized attacker to deny service over a network.

Published: 13 Oct 2026 Updated: 29 Oct 2026 View details →
CVE-2026-83664 MEDIUM CVSS 5.53.1

Access of resource using incompatible type ('type confusion') in Windows Portable Device File System Driver allows an authorized attacker to disclose information locally.

Published: 13 Oct 2026 Updated: 29 Oct 2026 View details →
CVE-2026-83659 HIGH CVSS 7.83.1

Improper link resolution before file access ('link following') in Windows User Profile Service allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 29 Oct 2026 View details →
CVE-2026-83658 MEDIUM CVSS 5.53.1

Improper access control in Windows Error Reporting allows an authorized attacker to disclose information locally.

Published: 13 Oct 2026 Updated: 29 Oct 2026 View details →
CVE-2026-83657 MEDIUM CVSS 5.53.1

Weak authentication in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally.

Published: 13 Oct 2026 Updated: 29 Oct 2026 View details →
CVE-2026-83656 MEDIUM CVSS 4.73.1

Missing authentication for critical function in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally.

Published: 13 Oct 2026 Updated: 29 Oct 2026 View details →
CVE-2026-83655 HIGH CVSS 7.53.1

Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to deny service over a network.

Published: 13 Oct 2026 Updated: 29 Oct 2026 View details →
CVE-2026-83654 HIGH CVSS 7.83.1

Missing authentication for critical function in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 29 Oct 2026 View details →
CVE-2026-83652 HIGH CVSS 7.83.1

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 29 Oct 2026 View details →
CVE-2026-83651 HIGH CVSS 7.53.1

Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information over a network.

Published: 13 Oct 2026 Updated: 31 Oct 2026 View details →
CVE-2026-83650 HIGH CVSS 7.83.1

Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 29 Oct 2026 View details →
CVE-2026-83649 MEDIUM CVSS 6.53.1

Out-of-bounds read in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to deny service over a network.

Published: 13 Oct 2026 Updated: 29 Oct 2026 View details →
CVE-2026-83648 MEDIUM CVSS 6.53.1

Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network.

Published: 13 Oct 2026 Updated: 29 Oct 2026 View details →
CVE-2026-83647 HIGH CVSS 7.53.1

Out-of-bounds read in Active Directory Domain Services allows an unauthorized attacker to deny service over a network.

Published: 13 Oct 2026 Updated: 29 Oct 2026 View details →
CVE-2026-83646 MEDIUM CVSS 5.43.1

Url redirection to untrusted site ('open redirect') in Active Directory Federation Services (AD FS) allows an authorized attacker to perform spoofing over a network.

Published: 13 Oct 2026 Updated: 29 Oct 2026 View details →
CVE-2026-83645 HIGH CVSS 7.53.1

Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.

Published: 13 Oct 2026 Updated: 29 Oct 2026 View details →
CVE-2026-83644 HIGH CVSS 7.03.1

Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 29 Oct 2026 View details →
CVE-2026-83643 HIGH CVSS 8.83.1

Stack-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.

Published: 13 Oct 2026 Updated: 29 Oct 2026 View details →