Search
CVE Explorer
Search the full tracked CVE corpus across every vendor — by keyword, vendor, severity, CVSS band and publication date. Server-rendered; each filtered view has its own URL.
01
Filters
Submit to refine — state is held in the URL.
02
Results
71,167 matching · page 119/1424Each CVE id links to its NVD record.
| CVE | Severity | CVSS | Summary | Published |
|---|---|---|---|---|
| CVE-2026-103575(opens NVD record) | High | 8.8 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | Oct 13, 2026 |
| CVE-2026-103572(opens NVD record) | High | 8.8 | Improper control of generation of code ('code injection') in Visual Studio Tools for Applications and SQL Server Management Studio allows an unauthorized attacker to execute code over a network. | Oct 13, 2026 |
| CVE-2026-103569(opens NVD record) | High | 7.5 | Out-of-bounds read in Windows IKE Extension allows an unauthorized attacker to disclose information over a network. | Oct 13, 2026 |
| CVE-2026-103568(opens NVD record) | High | 7.8 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Credential Providers allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-103567(opens NVD record) | Medium | 5.5 | Buffer over-read in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally. | Oct 13, 2026 |
| CVE-2026-103565(opens NVD record) | High | 7.0 | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-103560(opens NVD record) | Medium | 5.5 | Improper authorization in DNS Server allows an authorized attacker to perform tampering locally. | Oct 13, 2026 |
| CVE-2026-103558(opens NVD record) | High | 7.5 | Deadlock in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network. | Oct 13, 2026 |
| CVE-2026-103555(opens NVD record) | High | 7.0 | Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-103554(opens NVD record) | High | 7.0 | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-103553(opens NVD record) | High | 7.8 | Out-of-bounds read in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-102870(opens NVD record) | High | 8.8 | Improper control of generation of code ('code injection') in ASP.NET Core allows an unauthorized attacker to execute code over a network. | Oct 13, 2026 |
| CVE-2026-102869(opens NVD record) | High | 8.8 | Access of resource using incompatible type ('type confusion') in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network. | Oct 13, 2026 |
| CVE-2026-102867(opens NVD record) | Medium | 6.5 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. | Oct 13, 2026 |
| CVE-2026-102866(opens NVD record) | High | 8.1 | Improper verification of cryptographic signature in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network. | Oct 13, 2026 |
| CVE-2026-102865(opens NVD record) | Medium | 6.5 | Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network. | Oct 13, 2026 |
| CVE-2026-102864(opens NVD record) | Medium | 4.6 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. | Oct 13, 2026 |
| CVE-2026-102863(opens NVD record) | High | 8.8 | Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. | Oct 13, 2026 |
| CVE-2026-102862(opens NVD record) | High | 8.8 | Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. | Oct 13, 2026 |
| CVE-2026-102861(opens NVD record) | High | 8.8 | Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. | Oct 13, 2026 |
| CVE-2026-102860(opens NVD record) | High | 8.8 | Improper access control in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. | Oct 13, 2026 |
| CVE-2026-102859(opens NVD record) | Medium | 4.6 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. | Oct 13, 2026 |
| CVE-2026-102858(opens NVD record) | High | 8.8 | Heap-based buffer overflow in Microsoft Office OneNote allows an unauthorized attacker to execute code over a network. | Oct 13, 2026 |
| CVE-2026-102857(opens NVD record) | High | 8.8 | Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network. | Oct 13, 2026 |
| CVE-2026-102856(opens NVD record) | High | 8.8 | Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network. | Oct 13, 2026 |
| CVE-2026-102851(opens NVD record) | Medium | 6.1 | Incorrect privilege assignment in Visual Studio Code allows an authorized attacker to bypass a security feature locally. | Oct 13, 2026 |
| CVE-2026-102850(opens NVD record) | High | 8.8 | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. | Oct 13, 2026 |
| CVE-2026-102849(opens NVD record) | High | 8.8 | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. | Oct 13, 2026 |
| CVE-2026-102599(opens NVD record) | High | 7.5 | Socket.IO enables bidirectional and low-latency communication for every platform. From Engine.IO 6.6.0 until 6.6.10, a transport upgrade can independently derive an Engine.IO protocol revision from the upgrade request instead of enforcing the revision stored on the existing session. A malicious client can establish a valid session and send an upgrade request with a different or omitted EIO query parameter, attaching a transport with incompatible parser and heartbeat behavior. A crafted heartbeat packet can then trigger an uncaught exception and terminate the Node.js process, including when Engine.IO v3 compatibility is disabled because an omitted EIO value is interpreted as revision 3 on the affected path. This issue is fixed in Engine.IO 6.6.10. | Oct 13, 2026 |
| CVE-2026-102233(opens NVD record) | High | 7.8 | Missing authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally. | Oct 13, 2026 |
| CVE-2026-102232(opens NVD record) | High | 7.0 | Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally. | Oct 13, 2026 |
| CVE-2026-102231(opens NVD record) | High | 7.7 | Improper resolution of path equivalence in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally. | Oct 13, 2026 |
| CVE-2026-102229(opens NVD record) | Medium | 6.8 | Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an authorized attacker to disclose information over a network. | Oct 13, 2026 |
| CVE-2026-102227(opens NVD record) | High | 7.8 | Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally. | Oct 13, 2026 |
| CVE-2026-102226(opens NVD record) | High | 8.8 | Improper limitation of a pathname to a restricted directory ('path traversal') in Dynamics Business Central allows an authorized attacker to elevate privileges over a network. | Oct 13, 2026 |
| CVE-2026-102225(opens NVD record) | High | 8.8 | Out-of-bounds read in Windows Text Shaping allows an unauthorized attacker to execute code over a network. | Oct 13, 2026 |
| CVE-2026-102221(opens NVD record) | Medium | 4.4 | No cwe for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feature locally. | Oct 13, 2026 |
| CVE-2026-102220(opens NVD record) | High | 7.8 | Use after free in Windows VHD miniport driver allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-102218(opens NVD record) | High | 7.8 | Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-102217(opens NVD record) | High | 8.8 | Improper resolution of path equivalence in WebDAV allows an authorized attacker to elevate privileges over a network. | Oct 13, 2026 |
| CVE-2026-102216(opens NVD record) | High | 7.8 | Access of resource using incompatible type ('type confusion') in Windows StateRepository API allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-102215(opens NVD record) | High | 7.8 | Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-102214(opens NVD record) | High | 8.8 | Use after free in Windows Hyper-V allows an authorized attacker to execute code locally. | Oct 13, 2026 |
| CVE-2026-102211(opens NVD record) | High | 7.0 | Use after free in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-102210(opens NVD record) | Critical | 9.8 | Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network. | Oct 13, 2026 |
| CVE-2026-102209(opens NVD record) | High | 7.0 | Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-102208(opens NVD record) | High | 7.0 | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-102207(opens NVD record) | High | 7.0 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-102206(opens NVD record) | Medium | 6.8 | Heap-based buffer overflow in Windows Portable Device MTP Driver allows an unauthorized attacker to elevate privileges with a physical attack. | Oct 13, 2026 |
| CVE-2026-102205(opens NVD record) | High | 7.8 | Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |