Vulnerabilities
All
My stack
Known exploited
Public exploit
Critical (9+)
Likely exploited (EPSS ≥ 50%)
Changed, 3 days
New, 24 h
Sort:
risk
modified
published
CVSS
EPSS
| CVE | CVSS | EPSS | Vendor, product | Description | Modified |
|---|---|---|---|---|---|
| CVE-2026-50528 | 8.2 high | 1.0% | microsoft, .net, visual_studio_2022, visual_studio_2026 | Incorrect authorization in .NET allows an unauthorized attacker to bypass a security feature over a network. | Wed 28 Oct |
| CVE-2026-50429 | 8.2 high | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Out-of-bounds read in Windows Kernel allows an unauthorized attacker to disclose information over a network. | Wed 28 Oct |
| CVE-2026-112893 | 8.2 high | 1.0% | python, pillow | Pillow is a Python imaging library. From 10.0.0 until 13.0.0, Pillow can free an invalid glyph pointer during FreeType rendering with an active stroker. If FT_Load_Glyph fails, cleanup may call FT_Done_Glyph on an uninitialized or stale glyph variable. An attacker can supply a malformed font as untrusted bytes to an application that draws text with a nonzero stroke width, forcing the glyph-load failure path. This can corrupt memory or crash the process. This issue is fixed in version 13.0.0. | Wed 28 Oct |
| CVE-2026-112395 | 8.2 high | 1.0% | python, pillow | Pillow is a Python imaging library. From 8.2.0 until 13.0.0, Pillow's tiled-TIFF decoder can read past the tile buffer while copying four-byte pixels. In _decodeTile, libtiff can return a tile allocation smaller than the required row stride multiplied by the tile length, and Pillow's stride-and-copy loop walks beyond that allocation. An attacker can supply a crafted tiled TIFF to an application that loads it. This can expose adjacent heap data in pixels or crash the process. This issue is fixed in version 13.0.0. | Wed 28 Oct |
| CVE-2026-57191 | 8.2 high | 1.0% | no CPE yet | Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, an unbounded `sscanf` in `res_pjsip_pubsub` when parsing the `MWI NOTIFY` `Message-Account` field may allow an unauthenticated attacker to send a carefully crafted packet that causes a stack buffer overflow and corrupts the underlying transport, permanently disabling all SIP functionality. An Asterisk restart is required to restore full operation. This issue is fixed in Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3. | Wed 28 Oct |
| CVE-2023-3932 | 8.2 high | 1.0% | gitlab | An issue has been discovered in GitLab EE affecting all versions starting from 13.12 before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2. It was possible for an attacker to run pipeline jobs as an arbitrary user via scheduled security scan policies. | Wed 28 Oct |
| CVE-2026-83997 | 8.1 high | 1.0% | microsoft, windows 10 version 21h2, windows 10 version 22h2, windows 11 version 23h2 | Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network. | 7 h ago |
| CVE-2026-69530 | 8.1 high | 1.0% | microsoft, windows 10 version 1809, windows server 2019, windows server 2019 (server core installation) | Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over a network. | 7 h ago |
| CVE-2026-78450 | 8.1 high | 1.0% | microsoft, windows 10 version 1809, windows server 2019, windows server 2019 (server core installation) | Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over a network. | 7 h ago |
| CVE-2026-78444 | 8.1 high | 1.0% | microsoft, windows 10 version 1809, windows server 2019, windows server 2019 (server core installation) | Untrusted pointer dereference in Windows Failover Cluster allows an unauthorized attacker to execute code over a network. | 7 h ago |
| CVE-2026-78449 | 8.1 high | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over a network. | 7 h ago |
| CVE-2026-72987 | 8.1 high | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows server 2012 | Use after free in Windows DNS allows an unauthorized attacker to execute code over a network. | 7 h ago |
| CVE-2026-69510 | 8.1 high | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows server 2012 | Stack-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network. | 7 h ago |
| CVE-2026-72936 | 8.1 high | 1.0% | microsoft, windows 11 version 23h2, windows 11 version 24h2, windows 11 version 25h2 | Use after free in Windows SMB Client allows an unauthorized attacker to execute code over a network. | 7 h ago |
| CVE-2026-47297 | 8.1 high | 1.0% | microsoft, microsoft sql server 2019 (cu 32), microsoft sql server 2019 (gdr), microsoft sql server 2022 (cu 26) | Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over a network. | 7 h ago |
| CVE-2026-69858 | 8.1 high | 1.0% | microsoft, windows server 2022, windows server 2025, windows server 2025 (server core installation) | Use after free in Windows DNS allows an unauthorized attacker to execute code over a network. | 7 h ago |
| CVE-2026-69813 | 8.1 high | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows server 2012 | Use after free in Windows DNS allows an unauthorized attacker to execute code over a network. | 7 h ago |
| CVE-2026-69786 | 8.1 high | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network. | 7 h ago |
| CVE-2026-69620 | 8.1 high | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows server 2012 | Stack-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network. | 7 h ago |
| CVE-2026-69546 | 8.1 high | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Use after free in Active Directory Domain Services allows an unauthorized attacker to execute code over a network. | 7 h ago |
| CVE-2026-69438 | 8.1 high | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Incorrect conversion between numeric types in Microsoft JScript allows an unauthorized attacker to execute code over a network. | 7 h ago |
| CVE-2026-69827 | 8.1 high | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows server 2012 | Concurrent execution using shared resource with improper synchronization ('race condition') in DNS Server allows an unauthorized attacker to execute code over a network. | 7 h ago |
| CVE-2026-69989 | 8.1 high | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows server 2012 | Use after free in DNS Server allows an unauthorized attacker to execute code over a network. | 7 h ago |
| CVE-2026-77505 | 8.1 high | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows server 2012 | Use after free in DNS Server allows an unauthorized attacker to execute code over a network. | 7 h ago |
| CVE-2026-72981 | 8.1 high | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Use after free in IP Helper allows an unauthorized attacker to execute code over a network. | 7 h ago |
| CVE-2026-69380 | 8.1 high | 1.0% | microsoft, microsoft exchange server 2016 cumulative update 23, microsoft exchange server 2019 cumulative update 14, microsoft exchange server 2019 cumulative update 15 | Missing authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network. | 7 h ago |
| CVE-2026-70563 | 8.1 high | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Improper link resolution before file access ('link following') in Windows Shell allows an unauthorized attacker to perform spoofing over a network. | 7 h ago |
| CVE-2026-70342 | 8.1 high | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Use after free in Windows Ancillary Function Driver for WinSock allows an unauthorized attacker to elevate privileges over a network. | 7 h ago |
| CVE-2026-69524 | 8.1 high | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Use after free in Active Directory Domain Services allows an unauthorized attacker to execute code over a network. | 8 h ago |
| CVE-2026-69325 | 8.1 high | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Heap-based buffer overflow in Microsoft JScript allows an unauthorized attacker to execute code over a network. | 8 h ago |
| CVE-2026-55007 | 8.1 high | 1.0% | microsoft, microsoft exchange server 2019 cumulative update 14, microsoft exchange server 2019 cumulative update 15, microsoft exchange server subscription edition rtm | Double free in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network. | 8 h ago |
| CVE-2026-85899 | 8.1 high | 1.0% | microsoft, microsoft edge (chromium-based) | Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate privileges over a network. | 10 h ago |
| CVE-2026-104317 | 8.1 high | 1.0% | ibm, langflow oss | IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote attacker who could reach the message broker to execute arbitrary code on the system due to the deserialization of untrusted data. | 12 h ago |
| CVE-2026-56186 | 8.1 high | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Out-of-bounds read in Windows Schannel allows an authorized attacker to disclose information over a network. | Wed 28 Oct |
| CVE-2026-50686 | 8.1 high | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Access of resource using incompatible type ('type confusion') in Windows OLE allows an unauthorized attacker to execute code over a network. | Wed 28 Oct |
| CVE-2026-50487 | 8.1 high | 1.0% | microsoft, windows 11 version 24h2, windows 11 version 25h2, windows 11 version 26h1 | Use after free in Microsoft Windows DNS allows an unauthorized attacker to elevate privileges over a network. | Wed 28 Oct |
| CVE-2026-50439 | 8.1 high | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Use after free in Microsoft Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network. | Wed 28 Oct |
| CVE-2026-50460 | 8.1 high | 1.0% | microsoft, windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an unauthorized attacker to elevate privileges over a network. | Wed 28 Oct |
| CVE-2026-50694 | 8.1 high | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network. | Wed 28 Oct |
| CVE-2026-54995 | 8.1 high | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over a network. | Wed 28 Oct |
| CVE-2026-49164 | 8.1 high | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Heap-based buffer overflow in Active Directory Domain Services allows an unauthorized attacker to execute code over a network. | Wed 28 Oct |
| CVE-2026-42900 | 8.1 high | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows App Store allows an unauthorized attacker to elevate privileges over a network. | Wed 28 Oct |
| CVE-2026-109411 | 8.1 high | 1.0% | no CPE yet | An access control bypass flaw was found in Samba's vfs_ceph_rgw module in it's openat() function. An authenticated user can bypass access controls to read or overwrite restricted files on shares configured with the experimental vfs_ceph_rgw module. When a client requests an existing file using mismatched character casing, the module fails to perform a case-insensitive lookup correctly, causing the server to treat the operation as creating a new file. As a result, the server skips standard permission checks on the existing file, allowing the attacker to access or overwrite sensitive data owned by other users. | Wed 28 Oct |
| CVE-2026-70229 | 8.1 high | 1.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Incorrect authorization in Active Directory Domain Services allows an unauthorized attacker to execute code over a network. | Wed 28 Oct |
| CVE-2026-88120 | 8.1 high | 1.0% | microsoft, windows_server_2012, windows_server_2016, windows_server_2019 | Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network. | Wed 28 Oct |
| CVE-2026-88117 | 8.1 high | 1.0% | microsoft, windows_server_2012, windows_server_2016, windows_server_2019 | Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network. | Wed 28 Oct |
| CVE-2026-88119 | 8.1 high | 1.0% | microsoft, windows_server_2012, windows_server_2016, windows_server_2019 | Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network. | Wed 28 Oct |
| CVE-2026-70062 | 8.1 high | 1.0% | microsoft, windows_10_1809, windows_10_21h2, windows_10_22h2 | Double free in Windows Libarchive allows an unauthorized attacker to execute code over a network. | Wed 28 Oct |
| CVE-2026-14476 | 8.0 high | 1.0% | no CPE yet | A path traversal flaw was found in SSSD's AD GPO provider. The ad_gpo_extract_smb_components() function does not sanitize .. sequences in the gPCFileSysPath LDAP attribute, allowing an attacker with AD GPO management access to write files outside the GPO cache directory as root. On default RHEL configurations with SELinux enforcing, this can be used to inject Kerberos configuration leading to authentication bypass. | 6 h ago |
| CVE-2026-83948 | 8.0 high | 1.0% | microsoft, microsoft azure cli | Improper neutralization of special elements used in a command ('command injection') in Microsoft Azure CLI allows an authorized attacker to execute code over a network. | 7 h ago |
Download these 1000 as CSV (the first thousand in this order) · subscribe to this list.
EPSS scores: 2026-10-30. NVD cursor: 2026-10-29 00:22. The News page shows only notable CVEs (KEV, your stack, new criticals, EPSS over 50%, or active exploitation per SSVC); this table has all of them.