Vulnerabilities
All
My stack
Known exploited
Public exploit
Critical (9+)
Likely exploited (EPSS ≥ 50%)
Changed, 3 days
New, 24 h
Sort:
risk
modified
published
CVSS
EPSS
| CVE | CVSS | EPSS | Vendor, product | Description | Modified |
|---|---|---|---|---|---|
| CVE-2026-62697 | 7.8 high | 0.00% | microsoft, windows 10 version 21h2, windows 10 version 22h2, windows 11 version 23h2 | Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally. | Sat 31 Oct |
| CVE-2026-62810 | 7.8 high | 0.00% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Heap-based buffer overflow in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges locally. | Sat 31 Oct |
| CVE-2026-58611 | 7.8 high | 0.00% | microsoft, xbox gaming services | Improper authorization in XBox Gaming Services allows an authorized attacker to elevate privileges locally. | Sat 31 Oct |
| CVE-2026-56198 | 7.8 high | 0.00% | microsoft, windows 11 version 24h2, windows 11 version 25h2, windows 11 version 26h1 | Out-of-bounds read in Microsoft Trace Data Helper allows an authorized attacker to elevate privileges locally. | Sat 31 Oct |
| CVE-2026-56177 | 7.8 high | 0.00% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Use after free in Windows Server allows an authorized attacker to elevate privileges locally. | Sat 31 Oct |
| CVE-2026-85880 | 7.8 high | 0.00% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally. | Sat 31 Oct |
| CVE-2026-83976 | 7.8 high | 0.00% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. | Sat 31 Oct |
| CVE-2026-83975 | 7.8 high | 0.00% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. | Sat 31 Oct |
| CVE-2026-83974 | 7.8 high | 0.00% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. | Sat 31 Oct |
| CVE-2026-83979 | 7.8 high | 0.00% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Use after free in Windows Biometric Service allows an authorized attacker to elevate privileges locally. | Sat 31 Oct |
| CVE-2026-83988 | 7.8 high | 0.00% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. | Sat 31 Oct |
| CVE-2026-83969 | 7.8 high | 0.00% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. | Sat 31 Oct |
| CVE-2026-83986 | 7.8 high | 0.00% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. | Sat 31 Oct |
| CVE-2026-83955 | 7.8 high | 0.00% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. | Sat 31 Oct |
| CVE-2026-83952 | 7.8 high | 0.00% | microsoft, windows 11 version 24h2, windows 11 version 25h2, windows 11 version 26h1 | Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally. | Sat 31 Oct |
| CVE-2026-83942 | 7.8 high | 0.00% | microsoft, windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 | Missing authorization in Windows Kernel allows an authorized attacker to elevate privileges locally. | Sat 31 Oct |
| CVE-2026-80075 | 7.8 high | 0.00% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Heap-based buffer overflow in Windows Work Folders allows an authorized attacker to elevate privileges locally. | Sat 31 Oct |
| CVE-2026-77904 | 7.8 high | 0.00% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally. | Sat 31 Oct |
| CVE-2026-77500 | 7.8 high | 0.00% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Release of invalid pointer or reference in Windows Device Association Service allows an authorized attacker to elevate privileges locally. | Sat 31 Oct |
| CVE-2026-77489 | 7.8 high | 0.00% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Null pointer dereference in Windows Biometric Service allows an authorized attacker to elevate privileges locally. | Sat 31 Oct |
| CVE-2026-69787 | 7.8 high | 0.00% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. | Sat 31 Oct |
| CVE-2026-69476 | 7.8 high | 0.00% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. | Sat 31 Oct |
| CVE-2026-69604 | 7.8 high | 0.00% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally. | Sat 31 Oct |
| CVE-2026-69576 | 7.8 high | 0.00% | microsoft, microsoft office 365 for mac, microsoft office for android, microsoft office ltsc for mac 2021 | Use after free in Graphic Fonts allows an authorized attacker to elevate privileges locally. | Sat 31 Oct |
| CVE-2026-69580 | 7.8 high | 0.00% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. | Sat 31 Oct |
| CVE-2026-69589 | 7.8 high | 0.00% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. | Sat 31 Oct |
| CVE-2026-69583 | 7.8 high | 0.00% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. | Sat 31 Oct |
| CVE-2026-69544 | 7.8 high | 0.00% | microsoft, windows 11 version 26h1 | Heap-based buffer overflow in Windows SMB Client allows an authorized attacker to elevate privileges locally. | Sat 31 Oct |
| CVE-2026-69293 | 7.8 high | 0.00% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. | Sat 31 Oct |
| CVE-2026-68877 | 7.8 high | 0.00% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to execute code locally. | Sat 31 Oct |
| CVE-2026-68844 | 7.8 high | 0.00% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to execute code locally. | Sat 31 Oct |
| CVE-2026-72946 | 7.8 high | 0.00% | microsoft, windows 11 version 24h2, windows 11 version 25h2, windows 11 version 26h1 | Heap-based buffer overflow in Storage Port Driver allows an authorized attacker to elevate privileges locally. | Sat 31 Oct |
| CVE-2026-72944 | 7.8 high | 0.00% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally. | Sat 31 Oct |
| CVE-2026-72929 | 7.8 high | 0.00% | microsoft, windows 11 version 23h2, windows 11 version 24h2, windows 11 version 25h2 | Improper validation of integrity check value in Windows Installer allows an authorized attacker to elevate privileges locally. | Sat 31 Oct |
| CVE-2026-71345 | 7.8 high | 0.00% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Out-of-bounds write in Windows Spaceport.sys allows an authorized attacker to execute code locally. | Sat 31 Oct |
| CVE-2026-71343 | 7.8 high | 0.00% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to execute code locally. | Sat 31 Oct |
| CVE-2026-71334 | 7.8 high | 0.00% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Heap-based buffer overflow in Windows NFS Portmapper allows an authorized attacker to elevate privileges locally. | Sat 31 Oct |
| CVE-2026-71337 | 7.8 high | 0.00% | microsoft, windows 10 version 21h2, windows 10 version 22h2, windows 11 version 23h2 | Stack-based buffer overflow in Windows Storage Management Provider allows an authorized attacker to elevate privileges locally. | Sat 31 Oct |
| CVE-2026-70584 | 7.8 high | 0.00% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Access of resource using incompatible type ('type confusion') in Windows Core Messaging allows an authorized attacker to elevate privileges locally. | Sat 31 Oct |
| CVE-2026-70564 | 7.8 high | 0.00% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally. | Sat 31 Oct |
| CVE-2026-58600 | 7.8 high | 0.00% | microsoft, hevc video extensions, hevc video extensions for licensed applications, hevc video extensions from device manufacturer | Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to elevate privileges locally. | Sat 31 Oct |
| CVE-2026-70289 | 7.8 high | 0.00% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | Sat 31 Oct |
| CVE-2026-70334 | 7.8 high | 0.00% | microsoft, visual studio code | Incomplete list of disallowed inputs in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally. | Sat 31 Oct |
| CVE-2026-69822 | 7.8 high | 0.00% | microsoft, windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 | Numeric truncation error in Windows Kerberos allows an authorized attacker to elevate privileges locally. | Sat 31 Oct |
| CVE-2026-69758 | 7.8 high | 0.00% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. | Sat 31 Oct |
| CVE-2026-69691 | 7.8 high | 0.00% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally. | Sat 31 Oct |
| CVE-2026-69790 | 7.8 high | 0.00% | microsoft, windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 | Heap-based buffer overflow in Windows Credential Providers allows an authorized attacker to elevate privileges locally. | Sat 31 Oct |
| CVE-2026-69594 | 7.8 high | 0.00% | microsoft, windows 11 version 24h2, windows 11 version 25h2, windows 11 version 26h1 | Heap-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally. | Sat 31 Oct |
| CVE-2026-69608 | 7.8 high | 0.00% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Integer overflow or wraparound in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. | Sat 31 Oct |
| CVE-2026-69585 | 7.8 high | 0.00% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Incorrect type conversion or cast in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. | Sat 31 Oct |
1150 of 2687 · Next · Previous
Download these 1000 as CSV (the first thousand in this order) · subscribe to this list.
EPSS scores: 2026-10-31. NVD cursor: 2026-10-29 00:22. The News page shows only notable CVEs (KEV, your stack, new criticals, EPSS over 50%, or active exploitation per SSVC); this table has all of them.