Search
CVE Explorer
Search the full tracked CVE corpus across every vendor — by keyword, vendor, severity, CVSS band and publication date. Server-rendered; each filtered view has its own URL.
01
Filters
Submit to refine — state is held in the URL.
02
Results
148,528 matching · page 56/2971Each CVE id links to its NVD record.
| CVE | Severity | CVSS | Summary | Published |
|---|---|---|---|---|
| CVE-2026-85817(opens NVD record) | High | 8.8 | Reliance on untrusted inputs in a security decision in Windows PowerShell allows an unauthorized attacker to execute code over a network. | Oct 13, 2026 |
| CVE-2026-85816(opens NVD record) | Medium | 5.7 | Out-of-bounds read in Windows Wi-Fi Driver allows an authorized attacker to disclose information over an adjacent network. | Oct 13, 2026 |
| CVE-2026-85815(opens NVD record) | Medium | 5.5 | Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally. | Oct 13, 2026 |
| CVE-2026-85814(opens NVD record) | Critical | 9.8 | Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. | Oct 13, 2026 |
| CVE-2026-85812(opens NVD record) | Medium | 5.5 | Files or directories accessible to external parties in Windows Bind Filter Driver allows an authorized attacker to disclose information locally. | Oct 13, 2026 |
| CVE-2026-85811(opens NVD record) | High | 7.5 | Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over an adjacent network. | Oct 13, 2026 |
| CVE-2026-85810(opens NVD record) | High | 7.0 | Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-85809(opens NVD record) | Critical | 9.8 | Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine | Oct 13, 2026 |
| CVE-2026-85808(opens NVD record) | High | 7.5 | Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network. | Oct 13, 2026 |
| CVE-2026-85807(opens NVD record) | High | 7.8 | Integer overflow or wraparound in Windows USB Video Driver allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-85806(opens NVD record) | Critical | 9.8 | Integer underflow (wrap or wraparound) in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network. | Oct 13, 2026 |
| CVE-2026-85805(opens NVD record) | Medium | 6.5 | Improperly implemented security check for standard in Windows PowerShell allows an unauthorized attacker to bypass a security feature over a network. | Oct 13, 2026 |
| CVE-2026-85804(opens NVD record) | High | 7.8 | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-85803(opens NVD record) | High | 7.0 | Use after free in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-85802(opens NVD record) | High | 7.0 | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-85800(opens NVD record) | High | 7.8 | Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-85799(opens NVD record) | High | 8.1 | Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network. | Oct 13, 2026 |
| CVE-2026-85798(opens NVD record) | High | 7.2 | Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network. | Oct 13, 2026 |
| CVE-2026-85797(opens NVD record) | Medium | 6.5 | Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information over a network. | Oct 13, 2026 |
| CVE-2026-85796(opens NVD record) | High | 7.8 | Numeric truncation error in Windows Installer allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-85795(opens NVD record) | High | 7.8 | Use after free in Windows Text Services Framework allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-85794(opens NVD record) | Medium | 5.5 | Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to disclose information locally. | Oct 13, 2026 |
| CVE-2026-85793(opens NVD record) | Medium | 5.5 | Exposure of sensitive system information to an unauthorized control sphere in Windows Sysmain Service allows an authorized attacker to disclose information locally. | Oct 13, 2026 |
| CVE-2026-85792(opens NVD record) | Critical | 9.8 | Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine | Oct 13, 2026 |
| CVE-2026-85791(opens NVD record) | High | 7.0 | Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-85790(opens NVD record) | Medium | 5.9 | Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network. | Oct 13, 2026 |
| CVE-2026-85747(opens NVD record) | Medium | 6.8 | Distribution is a toolkit to pack, ship, store, and deliver container content. Prior to 3.1.2, registry/client.(*manifests).Get() reads a manifest returned for a digest-pinned request and passes it to distribution.UnmarshalManifest without hashing the body against the requested digest, allowing a malicious or intercepted registry response to substitute attacker-chosen manifest content even when Docker-Content-Digest claims the requested value. The bundled pull-through proxy in registry/proxy/proxymanifeststore.go can cache and re-serve the substituted manifest. This issue is fixed in version 3.1.2. | Oct 13, 2026 |
| CVE-2026-85377(opens NVD record) | High | 7.8 | Access of resource using incompatible type ('type confusion') in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-85376(opens NVD record) | High | 7.8 | Weak authentication in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-85375(opens NVD record) | High | 7.8 | Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-85374(opens NVD record) | Medium | 5.5 | Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locally. | Oct 13, 2026 |
| CVE-2026-85373(opens NVD record) | High | 7.8 | Heap-based buffer overflow in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-85372(opens NVD record) | High | 7.0 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-85371(opens NVD record) | High | 8.1 | Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network. | Oct 13, 2026 |
| CVE-2026-85370(opens NVD record) | High | 7.0 | Use after free in WebDAV allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-85369(opens NVD record) | High | 8.2 | Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-85368(opens NVD record) | High | 7.8 | Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-85367(opens NVD record) | High | 7.0 | Use after free in Windows Cash Drawer Protocol Provider allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-85366(opens NVD record) | High | 7.8 | Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-85365(opens NVD record) | High | 7.0 | Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-85364(opens NVD record) | High | 7.0 | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-85363(opens NVD record) | High | 8.8 | Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to elevate privileges over a network. | Oct 13, 2026 |
| CVE-2026-85362(opens NVD record) | High | 7.0 | Release of invalid pointer or reference in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-85361(opens NVD record) | High | 7.0 | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-85359(opens NVD record) | High | 7.8 | Improper control of generation of code ('code injection') in Windows Performance Monitor allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-85358(opens NVD record) | High | 7.8 | Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-85357(opens NVD record) | High | 7.0 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Phone Service allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-85356(opens NVD record) | High | 7.8 | Out-of-bounds read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-85355(opens NVD record) | High | 7.0 | Inclusion of functionality from untrusted control sphere in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-85354(opens NVD record) | High | 7.0 | Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |