Vulnerabilities
All
My stack
Known exploited
Public exploit
Critical (9+)
Likely exploited (EPSS ≥ 50%)
Changed, 3 days
New, 24 h
Sort:
risk
modified
published
CVSS
EPSS
| CVE | CVSS | EPSS | Vendor, product | Description | Modified |
|---|---|---|---|---|---|
| CVE-2024-58366 | 9.0 critical | 1.0% | delskayn, surrealdb, rquickjs | SurrealDB before 1.1.1 contains a format string vulnerability in the rquickjs Exception::throw_type function when scripting is enabled. Attackers with scripting privileges can supply format string sequences in error inputs to read arbitrary memory or execute code with SurrealDB process privileges. | Tue 27 Oct |
| CVE-2026-118579 | 8.9 high | 1.0% | no CPE yet | A weakness has been identified in D-Link DIR-505 1.10B02. The impacted element is the function main of the file /secmark1524.cgi of the component Web Management CGI. This manipulation of the argument accu/pass/code/hash/cmds causes backdoor. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks. | Wed 28 Oct |
| CVE-2026-89009 | 8.8 high | 1.0% | wavlink technology, wn535m1, wn535m3 | WAVLINK WN535M1 and WN535M3 routers running firmware prior to M35M1_V250922 contain an unauthenticated arbitrary file write vulnerability that allows remote attackers to overwrite any file on the device by sending a crafted payload to the sync_server daemon on TCP port 13136. The daemon, which runs as root and requires no authentication, accepts a 100-byte filename field in its protocol header without path canonicalization, allowing attackers to supply an absolute path and write arbitrary content to overwrite startup scripts or credential stores to achieve persistent system compromise. | 16 h ago |
| CVE-2026-70341 | 8.8 high | 1.0% | microsoft, edge, edge_chromium | Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over a network. | Wed 28 Oct |
| CVE-2026-85936 | 8.8 high | 1.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Double free in Windows Shell allows an unauthorized attacker to execute code over a network. | Wed 28 Oct |
| CVE-2026-47303 | 8.8 high | 1.0% | microsoft, .net, visual_studio_2022, visual_studio_2026 | Authentication bypass by assumed-immutable data in ASP.NET Core allows an authorized attacker to elevate privileges over a network. | Wed 28 Oct |
| CVE-2026-47300 | 8.8 high | 1.0% | microsoft, .net, visual_studio_2022, visual_studio_2026 | Incorrect implementation of authentication algorithm in ASP.NET Core allows an authorized attacker to elevate privileges over a network. | Wed 28 Oct |
| CVE-2026-62870 | 8.8 high | 1.0% | microsoft, microsoft 365 apps for enterprise, microsoft excel 2016, microsoft office 2019 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | Wed 28 Oct |
| CVE-2026-58626 | 8.8 high | 1.0% | microsoft, windows 10 version 21h2, windows 10 version 22h2, windows 11 version 24h2 | Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network. | Wed 28 Oct |
| CVE-2026-58594 | 8.8 high | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Integer overflow or wraparound in Windows RDP allows an unauthorized attacker to execute code over a network. | Wed 28 Oct |
| CVE-2026-58277 | 8.8 high | 1.0% | microsoft, microsoft sharepoint enterprise server 2016, microsoft sharepoint server 2019 | Improper authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. | Wed 28 Oct |
| CVE-2026-57087 | 8.8 high | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. | Wed 28 Oct |
| CVE-2026-57094 | 8.8 high | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. | Wed 28 Oct |
| CVE-2026-56647 | 8.8 high | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Integer overflow or wraparound in Windows Remote Access Service Infrastructure allows an authorized attacker to elevate privileges over a network. | Wed 28 Oct |
| CVE-2026-56194 | 8.8 high | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Heap-based buffer overflow in Windows Network File System allows an authorized attacker to elevate privileges over a network. | Wed 28 Oct |
| CVE-2026-55052 | 8.8 high | 1.0% | microsoft, microsoft sharepoint enterprise server 2016, microsoft sharepoint server 2019, microsoft sharepoint server subscription edition | Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. | Wed 28 Oct |
| CVE-2026-50666 | 8.8 high | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges over a network. | Wed 28 Oct |
| CVE-2026-47295 | 8.8 high | 1.0% | microsoft, microsoft sql server 2016 service pack 3 (gdr), microsoft sql server 2016 service pack 3 azure connect feature pack, microsoft sql server 2017 (cu 31) | Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network. | Wed 28 Oct |
| CVE-2026-50444 | 8.8 high | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows server 2012 | Missing authentication for critical function in Windows Server Update Service allows an authorized attacker to elevate privileges over a network. | Wed 28 Oct |
| CVE-2026-50474 | 8.8 high | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | Wed 28 Oct |
| CVE-2026-50398 | 8.8 high | 1.0% | microsoft, windows 11 version 24h2, windows 11 version 25h2, windows 11 version 26h1 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Media allows an authorized attacker to elevate privileges over a network. | Wed 28 Oct |
| CVE-2026-50370 | 8.8 high | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows server 2012 | Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over an adjacent network. | Wed 28 Oct |
| CVE-2026-50360 | 8.8 high | 1.0% | microsoft, windows 10 version 21h2, windows 10 version 22h2, windows 11 version 24h2 | Incorrect implementation of authentication algorithm in Windows SMB Server allows an authorized attacker to elevate privileges over a network. | Wed 28 Oct |
| CVE-2026-49178 | 8.8 high | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Heap-based buffer overflow in Active Directory Domain Services allows an authorized attacker to execute code over a network. | Wed 28 Oct |
| CVE-2026-48564 | 8.8 high | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows server 2012 | Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over a network. | Wed 28 Oct |
| CVE-2026-58608 | 8.8 high | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Print Spooler Components allows an authorized attacker to execute code over a network. | Wed 28 Oct |
| CVE-2026-55002 | 8.8 high | 1.0% | microsoft, microsoft sql server 2016 service pack 3 (gdr), microsoft sql server 2016 service pack 3 azure connect feature pack, microsoft sql server 2017 (cu 31) | External control of file name or path in SQL Server allows an authorized attacker to elevate privileges over a network. | Wed 28 Oct |
| CVE-2026-54982 | 8.8 high | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Integer underflow (wrap or wraparound) in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over an adjacent network. | Wed 28 Oct |
| CVE-2026-88121 | 8.8 high | 1.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network. | Wed 28 Oct |
| CVE-2026-88142 | 8.8 high | 1.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network. | Wed 28 Oct |
| CVE-2026-88157 | 8.8 high | 1.0% | microsoft, windows_10_1809, windows_10_21h2, windows_10_22h2 | Heap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacker to execute code over a network. | Wed 28 Oct |
| CVE-2026-88159 | 8.8 high | 1.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network. | Wed 28 Oct |
| CVE-2026-78674 | 8.8 high | 1.0% | no CPE yet | The BPMN System REST APIs do not sufficiently validate input parameters, allowing authenticated users to submit crafted requests that can lead to the execution of arbitrary commands on the server. An authenticated user can leverage this vulnerability to execute arbitrary commands with the privileges of the product's runtime account. The scope of potential damage is contingent upon the permissions assigned to this account. | Wed 28 Oct |
| CVE-2023-0698 | 8.8 high | 1.0% | google, chrome | Out of bounds read in WebRTC in Google Chrome prior to 110.0.5481.77 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: High) | Wed 28 Oct |
| CVE-2023-3634 | 8.8 high | 1.0% | no CPE yet | In products of the MSE6 product-family by Festo a remote authenticated, low privileged attacker could use functions of undocumented test mode which could lead to a complete loss of confidentiality, integrity and availability. | Wed 28 Oct |
| CVE-2026-77496 | 8.8 high | 1.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network. | Wed 28 Oct |
| CVE-2026-85339 | 8.8 high | 1.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine | Wed 28 Oct |
| CVE-2026-70258 | 8.8 high | 1.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. | Wed 28 Oct |
| CVE-2026-83526 | 8.8 high | 1.0% | no CPE yet | The FV Player 8 plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 8.1.7 via the check_mimetype function. This is due to insufficient file type validation in check_mimetype(), which writes attacker-supplied remote file content to the public uploads directory before any MIME or extension check, combined with a missing capability check on new player creation. This makes it possible for authenticated attackers, with subscriber-level access and above, to upload files that may be executable, which makes remote code execution possible. This requires successfully exploiting a race condition, and is only exploitable if the '[fvplayer_editor]' shortcode is present, or the "Enable profile videos" setting is enabled. | Wed 28 Oct |
| CVE-2026-70149 | 8.8 high | 1.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver (csc.sys) allows an authorized attacker to disclose information locally. | Wed 28 Oct |
| CVE-2026-70158 | 8.8 high | 1.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine | Wed 28 Oct |
| CVE-2026-70210 | 8.8 high | 1.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to elevate privileges over a network. | Wed 28 Oct |
| CVE-2026-118619 | 8.8 high | 1.0% | no CPE yet | Ultralytics Google Drive Download Path Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of downloads from Google Drive. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute arbitrary code in the context of the current process. Was ZDI-CAN-32376. | Wed 28 Oct |
| CVE-2026-85931 | 8.8 high | 1.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network. | Wed 28 Oct |
| CVE-2026-88115 | 8.8 high | 1.0% | microsoft, windows_10_1607, windows_10_1809, windows_server_2012 | Out-of-bounds read in Windows Server for NFS allows an unauthorized attacker to execute code over a network. | Wed 28 Oct |
| CVE-2026-106079 | 8.8 high | 1.0% | no CPE yet | An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in AccessManager in Juniper Networks Session Smart Router and Session Smart Conductor allows an attacker with config-write privileges to achieve arbitrary command execution as root in the YANG configuration. | Wed 28 Oct |
| CVE-2026-103403 | 8.8 high | 1.0% | no CPE yet | An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in AccessManager in Juniper Networks Session Smart Router and Session Smart Conductor allows an attacker to perform arbitrary file deletion and arbitrary command execution via the deletion of an audit rule. | Wed 28 Oct |
| CVE-2026-70068 | 8.8 high | 1.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an unauthorized attacker to elevate privileges over a network. | Wed 28 Oct |
| CVE-2026-70069 | 8.8 high | 1.0% | microsoft, windows_10_1607, windows_10_1809, windows_server_2012 | Stack-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over a network. | Wed 28 Oct |
| CVE-2026-70089 | 8.8 high | 1.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Heap-based buffer overflow in Windows GDI allows an unauthorized attacker to execute code over a network. | Wed 28 Oct |
Download these 1000 as CSV (the first thousand in this order) · subscribe to this list.
EPSS scores: 2026-10-29. NVD cursor: 2026-10-29 00:22. The News page shows only notable CVEs (KEV, your stack, new criticals, EPSS over 50%, or active exploitation per SSVC); this table has all of them.