Vulnerability intelligence

Explore. Understand.
Stay ahead.

A clearer way to explore known software vulnerabilities. Search CVE records, review severity and CVSS scores, and keep track of the issues that matter to you.

Independent vulnerability information and monitoring project

Search the vulnerability database

Find a CVE by ID, keyword, severity or CVSS score.

Centralized CVE data
Browse vulnerability records collected from public sources.
Severity at a glance
Compare severity levels and available CVSS scores.
Personal email alerts
Create alert preferences for critical issues and custom matches.
Browse the database

Latest vulnerability records

52 919
matching records · page 720 of 2117
CVE-2026-70149 HIGH CVSS 8.83.1

Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver (csc.sys) allows an authorized attacker to disclose information locally.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-70148 MEDIUM CVSS 6.53.1

Improper authorization in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-70147 CRITICAL CVSS 9.83.1

Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over a network.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-70144 HIGH CVSS 7.03.1

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 22 Oct 2026 View details →
CVE-2026-70143 HIGH CVSS 7.83.1

Heap-based buffer overflow in Windows Network File System allows an authorized attacker to execute code locally.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-70142 HIGH CVSS 7.83.1

Untrusted search path in Windows Update Service allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-70141 MEDIUM CVSS 5.53.1

Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-70140 HIGH CVSS 7.03.1

Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-70139 HIGH CVSS 7.83.1

Heap-based buffer overflow in Windows Update Service allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-70138 HIGH CVSS 7.83.1

Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-70137 MEDIUM CVSS 5.53.1

Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to disclose information locally.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-70136 HIGH CVSS 7.03.1

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-70135 MEDIUM CVSS 5.53.1

Out-of-bounds read in Windows Remote POS Driver allows an authorized attacker to disclose information locally.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-70134 HIGH CVSS 7.03.1

Use after free in Windows Event Tracing allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-70133 HIGH CVSS 7.53.1

Allocation of resources without limits or throttling in Windows SMB Server allows an unauthorized attacker to deny service over a network.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-70132 HIGH CVSS 7.83.1

Heap-based buffer overflow in Windows Portable Device File System Driver allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-70131 HIGH CVSS 7.83.1

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-70128 MEDIUM CVSS 5.53.1

Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-70126 HIGH CVSS 7.13.1

Out-of-bounds read in Windows Bluetooth Port Driver allows an unauthorized attacker to execute code over an adjacent network.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-70123 HIGH CVSS 7.83.1

Numeric truncation error in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-70122 MEDIUM CVSS 6.53.1

Time-of-check time-of-use (toctou) race condition in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-70121 HIGH CVSS 7.83.1

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 22 Oct 2026 View details →
CVE-2026-70118 HIGH CVSS 7.03.1

Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →
CVE-2026-70117 HIGH CVSS 7.83.1

Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 22 Oct 2026 View details →
CVE-2026-70116 MEDIUM CVSS 4.23.1

Stack-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker to bypass a security feature with a physical attack.

Published: 13 Oct 2026 Updated: 28 Oct 2026 View details →