Search
CVE Explorer
Search the full tracked CVE corpus across every vendor — by keyword, vendor, severity, CVSS band and publication date. Server-rendered; each filtered view has its own URL.
01
Filters
Submit to refine — state is held in the URL.
02
Results
148,528 matching · page 57/2971Each CVE id links to its NVD record.
| CVE | Severity | CVSS | Summary | Published |
|---|---|---|---|---|
| CVE-2026-85353(opens NVD record) | High | 7.5 | Out-of-bounds read in Windows Print Spooler Components allows an unauthorized attacker to disclose information over a network. | Oct 13, 2026 |
| CVE-2026-85352(opens NVD record) | High | 7.0 | Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-85343(opens NVD record) | High | 7.8 | Improper link resolution before file access ('link following') in Windows Hyper-V allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-85342(opens NVD record) | High | 7.0 | Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-85341(opens NVD record) | High | 7.8 | Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-85340(opens NVD record) | High | 7.8 | Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-85339(opens NVD record) | High | 8.8 | Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine | Oct 13, 2026 |
| CVE-2026-85338(opens NVD record) | High | 7.8 | Out-of-bounds read in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-85337(opens NVD record) | Medium | 6.5 | Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network. | Oct 13, 2026 |
| CVE-2026-85336(opens NVD record) | Medium | 5.5 | Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally. | Oct 13, 2026 |
| CVE-2026-85334(opens NVD record) | High | 7.5 | Out-of-bounds read in Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose information over a network. | Oct 13, 2026 |
| CVE-2026-85333(opens NVD record) | Medium | 6.7 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Performance Monitor allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-85332(opens NVD record) | High | 7.8 | Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-85331(opens NVD record) | Medium | 6.5 | Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information over a network. | Oct 13, 2026 |
| CVE-2026-85329(opens NVD record) | High | 7.0 | Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Account allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-85328(opens NVD record) | High | 7.0 | Weak authentication in Windows Projected File System allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-85327(opens NVD record) | High | 7.8 | Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-85324(opens NVD record) | High | 7.5 | Memory allocation with excessive size value in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network. | Oct 13, 2026 |
| CVE-2026-85323(opens NVD record) | Medium | 6.8 | Weak authentication in Network Device Enrollment Service (NDES) allows an authorized attacker to perform spoofing over a network. | Oct 13, 2026 |
| CVE-2026-85322(opens NVD record) | High | 7.5 | Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network. | Oct 13, 2026 |
| CVE-2026-85321(opens NVD record) | High | 7.5 | Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network. | Oct 13, 2026 |
| CVE-2026-85320(opens NVD record) | Medium | 5.5 | Use of uninitialized resource in Windows Print Spooler Components allows an authorized attacker to disclose information locally. | Oct 13, 2026 |
| CVE-2026-85319(opens NVD record) | High | 7.5 | Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network. | Oct 13, 2026 |
| CVE-2026-85318(opens NVD record) | High | 7.8 | Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-84994(opens NVD record) | Unscored | — | Qwik is a performance-focused JavaScript framework. Prior to @builder.io/qwik 1.20.0 and @qwik.dev/core 2.0.0-beta.37, default server-side qwik-json deserialization causes ResourceSerializer.$fill$ to pass resource._resolved to Promise.resolve without first rejecting attacker-controlled thenables. An unauthenticated request can provide a plain object whose then property is a QRL for an unregistered symbol, causing an orphaned asynchronous rejection that terminates Node.js under its default unhandled-rejection policy. A single request can crash a server, and repeated requests can keep replicas unavailable. This issue is fixed in @builder.io/qwik 1.20.0 and @qwik.dev/core 2.0.0-beta.37. | Oct 13, 2026 |
| CVE-2026-84020(opens NVD record) | High | 7.0 | Use after free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-84019(opens NVD record) | High | 7.0 | Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-84018(opens NVD record) | High | 7.0 | Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-84017(opens NVD record) | High | 7.5 | Null pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network. | Oct 13, 2026 |
| CVE-2026-84016(opens NVD record) | High | 7.8 | Out-of-bounds write in Windows EAPHost Service allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-84015(opens NVD record) | Critical | 9.8 | Heap-based buffer overflow in Remote Access Point-to-Point Protocol (PPP) EAP-TLS allows an unauthorized attacker to execute code over a network. | Oct 13, 2026 |
| CVE-2026-84014(opens NVD record) | High | 7.0 | Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-84013(opens NVD record) | High | 7.8 | Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-84012(opens NVD record) | High | 8.1 | Double free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network. | Oct 13, 2026 |
| CVE-2026-84011(opens NVD record) | Medium | 5.5 | Incorrect authorization in Windows SMB Client allows an authorized attacker to bypass a security feature locally. | Oct 13, 2026 |
| CVE-2026-84009(opens NVD record) | Medium | 4.7 | Time-of-check time-of-use (toctou) race condition in Windows Projected File System allows an authorized attacker to perform tampering locally. | Oct 13, 2026 |
| CVE-2026-84008(opens NVD record) | High | 7.5 | Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network. | Oct 13, 2026 |
| CVE-2026-84007(opens NVD record) | Medium | 6.5 | Out-of-bounds read in Remote Desktop Gateway Service allows an authorized attacker to disclose information over a network. | Oct 13, 2026 |
| CVE-2026-83935(opens NVD record) | Critical | 9.8 | Heap-based buffer overflow in Microsoft XML allows an unauthorized attacker to execute code over a network. | Oct 13, 2026 |
| CVE-2026-83934(opens NVD record) | High | 8.8 | Stack-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network. | Oct 13, 2026 |
| CVE-2026-83933(opens NVD record) | Medium | 5.5 | Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authorized attacker to disclose information locally. | Oct 13, 2026 |
| CVE-2026-83932(opens NVD record) | High | 7.8 | Heap-based buffer overflow in Windows Group Policy allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-83931(opens NVD record) | High | 7.8 | Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally. | Oct 13, 2026 |
| CVE-2026-83930(opens NVD record) | High | 7.0 | Use after free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-83929(opens NVD record) | High | 8.8 | Out-of-bounds write in Windows GDI allows an unauthorized attacker to execute code over a network. | Oct 13, 2026 |
| CVE-2026-83928(opens NVD record) | High | 8.8 | Out-of-bounds write in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to execute code over a network. | Oct 13, 2026 |
| CVE-2026-83927(opens NVD record) | High | 7.8 | Improper link resolution before file access ('link following') in Windows Registry allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-83926(opens NVD record) | Medium | 4.4 | Improper certificate validation in Windows Hello allows an authorized attacker to bypass a security feature locally. | Oct 13, 2026 |
| CVE-2026-83925(opens NVD record) | Medium | 4.7 | Use of uninitialized resource in Windows Kernel allows an authorized attacker to disclose information locally. | Oct 13, 2026 |
| CVE-2026-83924(opens NVD record) | High | 7.0 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |