Vulnerabilities
All
My stack
Known exploited
Public exploit
Critical (9+)
Likely exploited (EPSS ≥ 50%)
Changed, 3 days
New, 24 h
Sort:
risk
modified
published
CVSS
EPSS
| CVE | CVSS | EPSS | Vendor, product | Description | Modified |
|---|---|---|---|---|---|
| CVE-2026-69409 | 6.5 medium | 1.0% | microsoft, microsoft sharepoint server subscription edition | Execution with unnecessary privileges in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network. | 4 h ago |
| CVE-2026-69395 | 6.5 medium | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows server 2012 | Use of externally-controlled format string in Active Directory Certificate Services (AD CS) allows an authorized attacker to disclose information over a network. | 4 h ago |
| CVE-2026-72942 | 6.5 medium | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Out-of-bounds read in Windows Spaceport.sys allows an unauthorized attacker to disclose information over a network. | 4 h ago |
| CVE-2026-64918 | 6.5 medium | 1.0% | microsoft, microsoft 365 apps for enterprise | Insufficiently protected credentials in Microsoft Office allows an unauthorized attacker to perform spoofing over a network. | 4 h ago |
| CVE-2026-69624 | 6.5 medium | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows server 2012 | Incomplete list of disallowed inputs in Active Directory Certificate Services (AD CS) allows an authorized attacker to perform tampering over a network. | 4 h ago |
| CVE-2026-69497 | 6.5 medium | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows server 2012 | Missing release of memory after effective lifetime in Windows DHCP Server allows an authorized attacker to deny service over a network. | 4 h ago |
| CVE-2026-69374 | 6.5 medium | 1.0% | microsoft, windows 10 version 21h2, windows 10 version 22h2, windows 11 version 23h2 | Allocation of resources without limits or throttling in Windows SMB Server allows an authorized attacker to deny service over a network. | 4 h ago |
| CVE-2026-69297 | 6.5 medium | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows server 2012 | Storing passwords in a recoverable format in Windows DHCP Server allows an authorized attacker to disclose information over a network. | 4 h ago |
| CVE-2026-68898 | 6.5 medium | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Out-of-bounds read in Windows iSCSI allows an unauthorized attacker to deny service over a network. | 4 h ago |
| CVE-2026-68780 | 6.5 medium | 1.0% | microsoft, microsoft sql server 2017 (cu 31), microsoft sql server 2017 (gdr), microsoft sql server 2019 (cu 32) | Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network. | 4 h ago |
| CVE-2026-68779 | 6.5 medium | 1.0% | microsoft, microsoft sql server 2017 (cu 31), microsoft sql server 2017 (gdr), microsoft sql server 2019 (cu 32) | Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network. | 4 h ago |
| CVE-2026-68778 | 6.5 medium | 1.0% | microsoft, microsoft sql server 2017 (cu 31), microsoft sql server 2017 (gdr), microsoft sql server 2019 (cu 32) | Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network. | 4 h ago |
| CVE-2026-68777 | 6.5 medium | 1.0% | microsoft, microsoft sql server 2017 (cu 31), microsoft sql server 2017 (gdr), microsoft sql server 2019 (cu 32) | Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network. | 4 h ago |
| CVE-2026-68776 | 6.5 medium | 1.0% | microsoft, microsoft sql server 2017 (cu 31), microsoft sql server 2017 (gdr), microsoft sql server 2019 (cu 32) | Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network. | 4 h ago |
| CVE-2026-67648 | 6.5 medium | 1.0% | microsoft, microsoft sql server 2017 (cu 31), microsoft sql server 2017 (gdr), microsoft sql server 2019 (cu 32) | Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network. | 4 h ago |
| CVE-2026-67641 | 6.5 medium | 1.0% | microsoft, microsoft sql server 2022 (cu 26), microsoft sql server 2022 (gdr), microsoft sql server 2025 (cu8) | Integer overflow or wraparound in SQL Server allows an authorized attacker to deny service over a network. | 4 h ago |
| CVE-2026-67393 | 6.5 medium | 1.0% | microsoft, microsoft sql server 2017 (cu 31), microsoft sql server 2017 (gdr), microsoft sql server 2019 (cu 32) | Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network. | 4 h ago |
| CVE-2026-67390 | 6.5 medium | 1.0% | microsoft, microsoft sql server 2017 (cu 31), microsoft sql server 2017 (gdr), microsoft sql server 2019 (cu 32) | Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network. | 4 h ago |
| CVE-2026-67386 | 6.5 medium | 1.0% | microsoft, microsoft sql server 2017 (cu 31), microsoft sql server 2017 (gdr), microsoft sql server 2019 (cu 32) | Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network. | 4 h ago |
| CVE-2026-66816 | 6.5 medium | 1.0% | microsoft, microsoft sql server 2022 (cu 26), microsoft sql server 2022 (gdr), microsoft sql server 2025 (cu8) | Insufficient logging in SQL Server allows an authorized attacker to bypass a security feature over a network. | 4 h ago |
| CVE-2026-62762 | 6.5 medium | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network. | 4 h ago |
| CVE-2026-70019 | 6.5 medium | 1.0% | microsoft, windows 11 version 23h2, windows 11 version 24h2, windows 11 version 25h2 | Windows hard link in Windows Compressed Folder allows an unauthorized attacker to disclose information over a network. | 4 h ago |
| CVE-2026-81381 | 6.5 medium | 1.0% | microsoft, visual studio code | Insufficiently protected credentials in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network. | 4 h ago |
| CVE-2026-81377 | 6.5 medium | 1.0% | microsoft, visual studio code | Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an unauthorized attacker to perform tampering over a network. | 4 h ago |
| CVE-2026-73029 | 6.5 medium | 1.0% | microsoft, microsoft sql server 2019 (cu 32), microsoft sql server 2019 (gdr), microsoft sql server 2022 (cu 26) | Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network. | 4 h ago |
| CVE-2026-67389 | 6.5 medium | 1.0% | microsoft, microsoft sql server 2022 (cu 26), microsoft sql server 2022 (gdr), microsoft sql server 2025 (cu8) | Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network. | 4 h ago |
| CVE-2026-78515 | 6.5 medium | 1.0% | microsoft, microsoft 365 apps for enterprise, microsoft office 2016, microsoft office 2019 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. | 4 h ago |
| CVE-2026-78502 | 6.5 medium | 1.0% | microsoft, microsoft 365 apps for enterprise, microsoft office 2019, microsoft office 365 for mac | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. | 4 h ago |
| CVE-2026-67383 | 6.5 medium | 1.0% | microsoft, microsoft sql server 2025 (cu8), microsoft sql server 2025 for x64-based systems (gdr) | Generation of error message containing sensitive information in SQL Server allows an authorized attacker to disclose information over a network. | 4 h ago |
| CVE-2026-77896 | 6.5 medium | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Integer overflow or wraparound in Remote Desktop Client allows an unauthorized attacker to deny service over a network. | 4 h ago |
| CVE-2026-69683 | 6.5 medium | 1.0% | microsoft, microsoft sharepoint server subscription edition | Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network. | 4 h ago |
| CVE-2026-69739 | 6.5 medium | 1.0% | microsoft, microsoft 365 apps for enterprise, microsoft office 2016, microsoft office 2019 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network. | 4 h ago |
| CVE-2026-69719 | 6.5 medium | 1.0% | microsoft, microsoft 365 apps for enterprise, microsoft office 2019, microsoft office 365 for mac | Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. | 4 h ago |
| CVE-2026-69734 | 6.5 medium | 1.0% | microsoft, microsoft 365 apps for enterprise, microsoft office 2016, microsoft office 2019 | Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. | 4 h ago |
| CVE-2026-69375 | 6.5 medium | 1.0% | microsoft, microsoft exchange server 2016 cumulative update 23, microsoft exchange server 2019 cumulative update 14, microsoft exchange server 2019 cumulative update 15 | Authorization bypass through user-controlled key in Microsoft Exchange Server allows an authorized attacker to perform tampering over a network. | 4 h ago |
| CVE-2026-69361 | 6.5 medium | 1.0% | microsoft, microsoft exchange server 2016 cumulative update 23, microsoft exchange server 2019 cumulative update 14, microsoft exchange server 2019 cumulative update 15 | Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to perform spoofing over a network. | 4 h ago |
| CVE-2026-72939 | 6.5 medium | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Null pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to deny service over a network. | 4 h ago |
| CVE-2026-63523 | 6.5 medium | 1.0% | microsoft, skype for business server 2015 cu13, skype for business server 2019 cu8, skype for business server subscription edition cu1 | Improper neutralization of input during web page generation ('cross-site scripting') in Skype for Business allows an unauthorized attacker to perform spoofing over a network. | 4 h ago |
| CVE-2026-69839 | 6.5 medium | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows server 2012 | Uncaught exception in Windows iSCSI Target Service allows an authorized attacker to deny service over a network. | 4 h ago |
| CVE-2026-68784 | 6.5 medium | 1.0% | microsoft, microsoft sql server 2017 (cu 31), microsoft sql server 2017 (gdr), microsoft sql server 2019 (cu 32) | Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network. | 4 h ago |
| CVE-2026-62801 | 6.5 medium | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Improper limitation of a pathname to a restricted directory ('path traversal') in Windows PowerShell allows an unauthorized attacker to bypass a security feature over a network. | 4 h ago |
| CVE-2024-9676 | 6.5 medium | 1.0% | red hat, red hat enterprise linux 8, red hat enterprise linux 9, red hat enterprise linux 9.4 extended update support | A vulnerability was found in Podman, Buildah, and CRI-O. A symlink traversal vulnerability in the containers/storage library can cause Podman, Buildah, and CRI-O to hang and result in a denial of service via OOM kill when running a malicious image using an automatically assigned user namespace (`--userns=auto` in Podman and Buildah). The containers/storage library will read /etc/passwd inside the container, but does not properly validate if that file is a symlink, which can be used to cause the library to read an arbitrary file on the host. | Fri 30 Oct |
| CVE-2013-1840 | 6.5 medium | 1.0% | red hat, openstack folsom for rhel 6, red hat openstack platform 16.2, red hat openstack platform 17.1 | A flaw was found in OpenStack Glance. Remote authenticated users can exploit this vulnerability by requesting a cached image when the single-tenant Swift or S3 store is in use. This action causes the system to report the location field, which can lead to the disclosure of the operator's backend credentials. | Fri 30 Oct |
| CVE-2011-1594 | 6.5 medium | 1.0% | red hat, red hat network satellite server v 5.4, red hat enterprise linux 6, red hat enterprise linux 7 | A flaw was found in Spacewalk, as used in Red Hat Network Satellite. This open redirect vulnerability allows remote attackers to redirect users to arbitrary web sites by manipulating a URL in the url_bounce parameter. This can enable attackers to conduct phishing attacks, potentially leading to unauthorized information disclosure or credential theft. | Fri 30 Oct |
| CVE-2026-104309 | 6.5 medium | 1.0% | ibm, langflow oss | IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a restricted directory. | Thu 29 Oct |
| CVE-2026-115886 | 6.5 medium | 1.0% | no CPE yet | MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From 3.12.0rc0 until 3.17.0, the scorer invoke, register, and GenAI evaluate endpoints, including unauthenticated POST /ajax-api/3.0/mlflow/scorer/invoke, accept serialized third-party scorer data that Scorer.model_validate_json resolves using a module-path allowlist without constraining the selected class or its constructor arguments. When optional trulens and trulens-providers-litellm packages are installed, an attacker can select mlflow.genai.scorers.trulens, choose a model URI outside MLflow's native provider registry so execution uses the LiteLLM fallback, and supply api_base and api_key values that cause the server to send an outbound request to an attacker-chosen or internal host with attacker-controlled headers and body. The vulnerable deserialization occurs before a tracking-store lookup or job submission. This issue is fixed in version 3.17.0. | Thu 29 Oct |
| CVE-2026-66324 | 6.5 medium | 1.0% | microsoft, edge_chromium | External control of file name or path in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network. | Wed 28 Oct |
| CVE-2026-62902 | 6.5 medium | 1.0% | microsoft, visual_studio_2022, visual_studio_2026, .net | Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to disclose information over a network. | Wed 28 Oct |
| CVE-2026-40375 | 6.5 medium | 1.0% | microsoft, dynamics_365_business_central_2024, dynamics_365_business_central_2025, dynamics_365_business_central_2026 | Missing authorization in Dynamics Business Central allows an authorized attacker to disclose information over a network. | Wed 28 Oct |
| CVE-2026-58539 | 6.5 medium | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network. | Wed 28 Oct |
Download these 1000 as CSV (the first thousand in this order) · subscribe to this list.
EPSS scores: 2026-10-30. NVD cursor: 2026-10-29 00:22. The News page shows only notable CVEs (KEV, your stack, new criticals, EPSS over 50%, or active exploitation per SSVC); this table has all of them.