Search
CVE Explorer
Search the full tracked CVE corpus across every vendor — by keyword, vendor, severity, CVSS band and publication date. Server-rendered; each filtered view has its own URL.
01
Filters
Submit to refine — state is held in the URL.
02
Results
148,528 matching · page 65/2971Each CVE id links to its NVD record.
| CVE | Severity | CVSS | Summary | Published |
|---|---|---|---|---|
| CVE-2026-70248(opens NVD record) | Medium | 6.5 | Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally. | Oct 13, 2026 |
| CVE-2026-70247(opens NVD record) | High | 7.8 | Out-of-bounds read in Windows HTTP.sys allows an authorized attacker to execute code locally. | Oct 13, 2026 |
| CVE-2026-70246(opens NVD record) | High | 8.8 | Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. | Oct 13, 2026 |
| CVE-2026-70245(opens NVD record) | High | 7.8 | Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-70244(opens NVD record) | Medium | 6.5 | Out-of-bounds read in DNS Server allows an unauthorized attacker to disclose information over a network. | Oct 13, 2026 |
| CVE-2026-70243(opens NVD record) | High | 7.0 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-70242(opens NVD record) | Critical | 9.8 | Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. | Oct 13, 2026 |
| CVE-2026-70241(opens NVD record) | High | 7.0 | Use after free in Windows Kerberos allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-70238(opens NVD record) | High | 7.8 | Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-70237(opens NVD record) | High | 7.0 | Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-70236(opens NVD record) | High | 7.0 | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-70235(opens NVD record) | Medium | 5.5 | Improper authentication in Windows Event Tracing allows an authorized attacker to perform spoofing locally. | Oct 13, 2026 |
| CVE-2026-70234(opens NVD record) | Medium | 5.5 | Buffer over-read in Desktop Window Manager allows an authorized attacker to disclose information locally. | Oct 13, 2026 |
| CVE-2026-70233(opens NVD record) | High | 7.8 | Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-70232(opens NVD record) | Medium | 5.5 | Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally. | Oct 13, 2026 |
| CVE-2026-70230(opens NVD record) | High | 7.0 | Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-70229(opens NVD record) | High | 8.1 | Incorrect authorization in Active Directory Domain Services allows an unauthorized attacker to execute code over a network. | Oct 13, 2026 |
| CVE-2026-70228(opens NVD record) | High | 7.8 | Out-of-bounds read in Desktop Window Manager allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-70227(opens NVD record) | Medium | 5.5 | Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally. | Oct 13, 2026 |
| CVE-2026-70225(opens NVD record) | High | 7.8 | Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-70223(opens NVD record) | High | 7.0 | Use after free in Windows Console Driver allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-70222(opens NVD record) | High | 7.8 | Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-70220(opens NVD record) | High | 7.8 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. | Oct 13, 2026 |
| CVE-2026-70219(opens NVD record) | Medium | 6.5 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. | Oct 13, 2026 |
| CVE-2026-70218(opens NVD record) | High | 7.8 | Insufficient granularity of access control in Windows StateRepository API allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-70217(opens NVD record) | Medium | 4.9 | Improper access control in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network. | Oct 13, 2026 |
| CVE-2026-70216(opens NVD record) | Medium | 5.5 | Insufficient granularity of access control in Windows Mobile Device Management allows an authorized attacker to perform tampering locally. | Oct 13, 2026 |
| CVE-2026-70215(opens NVD record) | High | 8.8 | Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. | Oct 13, 2026 |
| CVE-2026-70214(opens NVD record) | Medium | 5.5 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. | Oct 13, 2026 |
| CVE-2026-70213(opens NVD record) | High | 8.0 | Origin validation error in Microsoft Power Apps allows an authorized attacker to execute code over a network. | Oct 13, 2026 |
| CVE-2026-70212(opens NVD record) | High | 7.0 | Improper restriction of communication channel to intended endpoints in Windows Security Center allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-70211(opens NVD record) | Medium | 5.5 | Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. | Oct 13, 2026 |
| CVE-2026-70210(opens NVD record) | High | 8.8 | Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to elevate privileges over a network. | Oct 13, 2026 |
| CVE-2026-70209(opens NVD record) | High | 7.0 | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-70208(opens NVD record) | Medium | 5.5 | Out-of-bounds read in Windows HTTP.sys allows an authorized attacker to disclose information locally. | Oct 13, 2026 |
| CVE-2026-70207(opens NVD record) | High | 7.5 | Heap-based buffer overflow in Network Policy Server (NPS) allows an authorized attacker to execute code over a network. | Oct 13, 2026 |
| CVE-2026-70206(opens NVD record) | Medium | 6.5 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. | Oct 13, 2026 |
| CVE-2026-70205(opens NVD record) | High | 7.0 | Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-70202(opens NVD record) | High | 7.5 | Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. | Oct 13, 2026 |
| CVE-2026-70201(opens NVD record) | Medium | 5.5 | Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service locally. | Oct 13, 2026 |
| CVE-2026-70199(opens NVD record) | Medium | 5.5 | Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally. | Oct 13, 2026 |
| CVE-2026-70198(opens NVD record) | High | 7.0 | Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-70197(opens NVD record) | High | 8.1 | Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network. | Oct 13, 2026 |
| CVE-2026-70196(opens NVD record) | Medium | 5.9 | Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to deny service over a network. | Oct 13, 2026 |
| CVE-2026-70195(opens NVD record) | Medium | 4.7 | Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to disclose information locally. | Oct 13, 2026 |
| CVE-2026-70194(opens NVD record) | Medium | 6.5 | Improper certificate validation in .NET Framework allows an unauthorized attacker to bypass a security feature over a network. | Oct 13, 2026 |
| CVE-2026-70190(opens NVD record) | High | 7.3 | Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-70188(opens NVD record) | Critical | 9.1 | Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network. | Oct 13, 2026 |
| CVE-2026-70187(opens NVD record) | High | 8.1 | Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network. | Oct 13, 2026 |
| CVE-2026-70186(opens NVD record) | High | 7.5 | Deadlock in ASP.NET Core allows an unauthorized attacker to deny service over a network. | Oct 13, 2026 |