Search
CVE Explorer
Search the full tracked CVE corpus across every vendor — by keyword, vendor, severity, CVSS band and publication date. Server-rendered; each filtered view has its own URL.
01
Filters
Submit to refine — state is held in the URL.
02
Results
146,701 matching · page 48/2935Each CVE id links to its NVD record.
| CVE | Severity | CVSS | Summary | Published |
|---|---|---|---|---|
| CVE-2026-96302(opens NVD record) | High | 7.0 | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-96301(opens NVD record) | High | 7.0 | Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-96300(opens NVD record) | Medium | 5.9 | Uncontrolled resource consumption in RPC Endpoint Mapper Service allows an unauthorized attacker to deny service over a network. | Oct 13, 2026 |
| CVE-2026-96254(opens NVD record) | High | 7.0 | Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-96253(opens NVD record) | High | 7.0 | Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-96252(opens NVD record) | Critical | 9.1 | Improper verification of cryptographic signature in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network. | Oct 13, 2026 |
| CVE-2026-96251(opens NVD record) | High | 8.8 | Reliance on untrusted inputs in a security decision in Microsoft PowerShell allows an unauthorized attacker to execute code over a network. | Oct 13, 2026 |
| CVE-2026-96250(opens NVD record) | High | 7.0 | Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-96249(opens NVD record) | High | 7.8 | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-96248(opens NVD record) | High | 7.5 | Stack-based buffer overflow in Windows Host Guardian Service allows an unauthorized attacker to deny service over a network. | Oct 13, 2026 |
| CVE-2026-96247(opens NVD record) | Medium | 5.5 | Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally. | Oct 13, 2026 |
| CVE-2026-96246(opens NVD record) | High | 7.5 | Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to disclose information over a network. | Oct 13, 2026 |
| CVE-2026-96245(opens NVD record) | High | 7.5 | Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network. | Oct 13, 2026 |
| CVE-2026-96244(opens NVD record) | High | 7.8 | Use after free in Windows Internal System User Profile allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-96243(opens NVD record) | High | 7.8 | Improper link resolution before file access ('link following') in Windows WalletService allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-96238(opens NVD record) | Medium | 6.5 | Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network. | Oct 13, 2026 |
| CVE-2026-96237(opens NVD record) | High | 7.5 | Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to execute code over a network. | Oct 13, 2026 |
| CVE-2026-96236(opens NVD record) | High | 7.5 | Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network. | Oct 13, 2026 |
| CVE-2026-96235(opens NVD record) | High | 8.8 | Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network. | Oct 13, 2026 |
| CVE-2026-96234(opens NVD record) | Medium | 5.3 | Origin validation error in .NET allows an unauthorized attacker to disclose information over a network. | Oct 13, 2026 |
| CVE-2026-96233(opens NVD record) | High | 7.5 | Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network. | Oct 13, 2026 |
| CVE-2026-96232(opens NVD record) | High | 7.5 | Out-of-bounds read in .NET allows an unauthorized attacker to disclose information over a network. | Oct 13, 2026 |
| CVE-2026-96231(opens NVD record) | High | 7.8 | Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-96230(opens NVD record) | High | 8.8 | Improper neutralization of input during web page generation ('cross-site scripting') in ASP.NET Core allows an unauthorized attacker to execute code over a network. | Oct 13, 2026 |
| CVE-2026-96229(opens NVD record) | Medium | 6.5 | Permissive list of allowed inputs in .NET allows an unauthorized attacker to disclose information over a network. | Oct 13, 2026 |
| CVE-2026-96225(opens NVD record) | High | 7.8 | Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-96224(opens NVD record) | High | 8.8 | Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network. | Oct 13, 2026 |
| CVE-2026-96223(opens NVD record) | High | 7.8 | Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-96222(opens NVD record) | High | 7.4 | Improper certificate validation in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network. | Oct 13, 2026 |
| CVE-2026-96220(opens NVD record) | High | 7.8 | Improper control of generation of code ('code injection') in Windows Assigned Access allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-96219(opens NVD record) | Critical | 9.8 | Out-of-bounds write in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to execute code over a network. | Oct 13, 2026 |
| CVE-2026-96218(opens NVD record) | Medium | 5.5 | Improper access control in Windows Update Stack allows an authorized attacker to perform tampering locally. | Oct 13, 2026 |
| CVE-2026-96217(opens NVD record) | High | 7.8 | Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-96216(opens NVD record) | High | 7.0 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-96215(opens NVD record) | High | 7.0 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Autopilot allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-96209(opens NVD record) | High | 7.0 | Out-of-bounds read in Windows Network File System allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-96206(opens NVD record) | Medium | 6.5 | Use of uninitialized resource in Windows Subsystem for Linux allows an authorized attacker to disclose information locally. | Oct 13, 2026 |
| CVE-2026-96204(opens NVD record) | Medium | 6.5 | Server-side request forgery (ssrf) in Azure Arc allows an authorized attacker to elevate privileges over a network. | Oct 13, 2026 |
| CVE-2026-96202(opens NVD record) | High | 8.8 | Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network. | Oct 13, 2026 |
| CVE-2026-96188(opens NVD record) | High | 7.3 | External control of system or configuration setting in Microsoft PowerToys allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-96186(opens NVD record) | High | 7.8 | Deserialization of untrusted data in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-96183(opens NVD record) | Medium | 5.5 | Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to disclose information locally. | Oct 13, 2026 |
| CVE-2026-96118(opens NVD record) | High | 7.8 | Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-96113(opens NVD record) | Critical | 9.8 | Heap-based buffer overflow in DNS Server allows an unauthorized attacker to execute code over a network. | Oct 13, 2026 |
| CVE-2026-96108(opens NVD record) | High | 7.8 | Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-96096(opens NVD record) | Critical | 9.8 | Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network. | Oct 13, 2026 |
| CVE-2026-96071(opens NVD record) | High | 7.5 | Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network. | Oct 13, 2026 |
| CVE-2026-96044(opens NVD record) | High | 8.8 | No cwe for this issue in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. | Oct 13, 2026 |
| CVE-2026-95943(opens NVD record) | High | 7.0 | Double free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-95904(opens NVD record) | Medium | 5.5 | Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose information locally. | Oct 13, 2026 |