Search
CVE Explorer
Search the full tracked CVE corpus across every vendor — by keyword, vendor, severity, CVSS band and publication date. Server-rendered; each filtered view has its own URL.
01
Filters
Submit to refine — state is held in the URL.
02
Results
148,528 matching · page 64/2971Each CVE id links to its NVD record.
| CVE | Severity | CVSS | Summary | Published |
|---|---|---|---|---|
| CVE-2026-70303(opens NVD record) | High | 7.8 | Out-of-bounds write in Windows Kernel allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-70302(opens NVD record) | High | 8.8 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | Oct 13, 2026 |
| CVE-2026-70301(opens NVD record) | High | 8.8 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | Oct 13, 2026 |
| CVE-2026-70300(opens NVD record) | Critical | 9.8 | Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | Oct 13, 2026 |
| CVE-2026-70299(opens NVD record) | High | 8.8 | Improper access control in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-70298(opens NVD record) | Medium | 6.5 | Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network. | Oct 13, 2026 |
| CVE-2026-70297(opens NVD record) | High | 8.8 | Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to execute code over a network. | Oct 13, 2026 |
| CVE-2026-70295(opens NVD record) | Medium | 5.5 | Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. | Oct 13, 2026 |
| CVE-2026-70294(opens NVD record) | Medium | 5.5 | Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. | Oct 13, 2026 |
| CVE-2026-70293(opens NVD record) | Medium | 5.5 | Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. | Oct 13, 2026 |
| CVE-2026-70292(opens NVD record) | Medium | 5.5 | Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. | Oct 13, 2026 |
| CVE-2026-70291(opens NVD record) | Critical | 9.8 | Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. | Oct 13, 2026 |
| CVE-2026-70288(opens NVD record) | Medium | 5.5 | Time-of-check time-of-use (toctou) race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. | Oct 13, 2026 |
| CVE-2026-70287(opens NVD record) | High | 8.8 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | Oct 13, 2026 |
| CVE-2026-70286(opens NVD record) | High | 7.8 | Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-70285(opens NVD record) | High | 7.8 | Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-70284(opens NVD record) | Medium | 5.5 | Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. | Oct 13, 2026 |
| CVE-2026-70282(opens NVD record) | High | 8.8 | Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. | Oct 13, 2026 |
| CVE-2026-70281(opens NVD record) | High | 7.5 | Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network. | Oct 13, 2026 |
| CVE-2026-70280(opens NVD record) | Medium | 4.4 | Incorrect authorization in Windows Hello allows an authorized attacker to bypass a security feature locally. | Oct 13, 2026 |
| CVE-2026-70279(opens NVD record) | Critical | 9.3 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network. | Oct 13, 2026 |
| CVE-2026-70278(opens NVD record) | High | 7.8 | Heap-based buffer overflow in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-70277(opens NVD record) | Medium | 5.5 | Out-of-bounds read in Windows Fast FAT Driver allows an unauthorized attacker to disclose information locally. | Oct 13, 2026 |
| CVE-2026-70276(opens NVD record) | High | 7.0 | Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-70275(opens NVD record) | High | 8.8 | Untrusted pointer dereference in Windows CD-ROM Driver allows an unauthorized attacker to execute code over a network. | Oct 13, 2026 |
| CVE-2026-70274(opens NVD record) | High | 7.8 | Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-70273(opens NVD record) | High | 7.0 | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-70272(opens NVD record) | High | 7.0 | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-70271(opens NVD record) | High | 7.0 | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-70270(opens NVD record) | Medium | 5.5 | Untrusted pointer dereference in Windows Container Isolation FS Filter Driver allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-70269(opens NVD record) | High | 8.1 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | Oct 13, 2026 |
| CVE-2026-70268(opens NVD record) | High | 8.8 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | Oct 13, 2026 |
| CVE-2026-70267(opens NVD record) | High | 7.2 | Inclusion of functionality from untrusted control sphere in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | Oct 13, 2026 |
| CVE-2026-70266(opens NVD record) | High | 8.8 | Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. | Oct 13, 2026 |
| CVE-2026-70264(opens NVD record) | Medium | 5.5 | Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to disclose information locally. | Oct 13, 2026 |
| CVE-2026-70263(opens NVD record) | Medium | 6.5 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. | Oct 13, 2026 |
| CVE-2026-70262(opens NVD record) | High | 8.8 | Heap-based buffer overflow in WebDAV allows an unauthorized attacker to elevate privileges over a network. | Oct 13, 2026 |
| CVE-2026-70261(opens NVD record) | Medium | 5.5 | Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to disclose information locally. | Oct 13, 2026 |
| CVE-2026-70260(opens NVD record) | Medium | 5.5 | Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to disclose information locally. | Oct 13, 2026 |
| CVE-2026-70259(opens NVD record) | Medium | 6.5 | Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network. | Oct 13, 2026 |
| CVE-2026-70258(opens NVD record) | High | 8.8 | Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. | Oct 13, 2026 |
| CVE-2026-70257(opens NVD record) | High | 8.8 | Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. | Oct 13, 2026 |
| CVE-2026-70256(opens NVD record) | High | 8.8 | Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. | Oct 13, 2026 |
| CVE-2026-70255(opens NVD record) | High | 7.8 | Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-70254(opens NVD record) | High | 8.8 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | Oct 13, 2026 |
| CVE-2026-70253(opens NVD record) | High | 7.0 | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-70252(opens NVD record) | High | 7.0 | Use after free in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-70251(opens NVD record) | High | 7.5 | Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. | Oct 13, 2026 |
| CVE-2026-70250(opens NVD record) | High | 8.8 | Use after free in Windows DHCP Client allows an unauthorized attacker to execute code over an adjacent network. | Oct 13, 2026 |
| CVE-2026-70249(opens NVD record) | High | 7.0 | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |