Vulnerabilities
All
My stack
Known exploited
Public exploit
Critical (9+)
Likely exploited (EPSS ≥ 50%)
Changed, 24 h
New, 24 h
Sort:
risk
modified
published
CVSS
EPSS
| CVE | CVSS | EPSS | Vendor, product | Description | Modified |
|---|---|---|---|---|---|
| CVE-2026-77489 | 7.8 high | 0.00% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Null pointer dereference in Windows Biometric Service allows an authorized attacker to elevate privileges locally. | 5 h ago |
| CVE-2026-69787 | 7.8 high | 0.00% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. | 5 h ago |
| CVE-2026-69476 | 7.8 high | 0.00% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. | 5 h ago |
| CVE-2026-69604 | 7.8 high | 0.00% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally. | 5 h ago |
| CVE-2026-69576 | 7.8 high | 0.00% | microsoft, microsoft office 365 for mac, microsoft office for android, microsoft office ltsc for mac 2021 | Use after free in Graphic Fonts allows an authorized attacker to elevate privileges locally. | 5 h ago |
| CVE-2026-69580 | 7.8 high | 0.00% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. | 5 h ago |
| CVE-2026-69589 | 7.8 high | 0.00% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. | 5 h ago |
| CVE-2026-69583 | 7.8 high | 0.00% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. | 5 h ago |
| CVE-2026-69544 | 7.8 high | 0.00% | microsoft, windows 11 version 26h1 | Heap-based buffer overflow in Windows SMB Client allows an authorized attacker to elevate privileges locally. | 5 h ago |
| CVE-2026-69293 | 7.8 high | 0.00% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. | 5 h ago |
| CVE-2026-68877 | 7.8 high | 0.00% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to execute code locally. | 5 h ago |
| CVE-2026-68844 | 7.8 high | 0.00% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to execute code locally. | 5 h ago |
| CVE-2026-72946 | 7.8 high | 0.00% | microsoft, windows 11 version 24h2, windows 11 version 25h2, windows 11 version 26h1 | Heap-based buffer overflow in Storage Port Driver allows an authorized attacker to elevate privileges locally. | 5 h ago |
| CVE-2026-72944 | 7.8 high | 0.00% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally. | 5 h ago |
| CVE-2026-72929 | 7.8 high | 0.00% | microsoft, windows 11 version 23h2, windows 11 version 24h2, windows 11 version 25h2 | Improper validation of integrity check value in Windows Installer allows an authorized attacker to elevate privileges locally. | 5 h ago |
| CVE-2026-71345 | 7.8 high | 0.00% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Out-of-bounds write in Windows Spaceport.sys allows an authorized attacker to execute code locally. | 5 h ago |
| CVE-2026-71343 | 7.8 high | 0.00% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to execute code locally. | 5 h ago |
| CVE-2026-71334 | 7.8 high | 0.00% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Heap-based buffer overflow in Windows NFS Portmapper allows an authorized attacker to elevate privileges locally. | 5 h ago |
| CVE-2026-71337 | 7.8 high | 0.00% | microsoft, windows 10 version 21h2, windows 10 version 22h2, windows 11 version 23h2 | Stack-based buffer overflow in Windows Storage Management Provider allows an authorized attacker to elevate privileges locally. | 5 h ago |
| CVE-2026-70584 | 7.8 high | 0.00% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Access of resource using incompatible type ('type confusion') in Windows Core Messaging allows an authorized attacker to elevate privileges locally. | 5 h ago |
| CVE-2026-70564 | 7.8 high | 0.00% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally. | 5 h ago |
| CVE-2026-58600 | 7.8 high | 0.00% | microsoft, hevc video extensions, hevc video extensions for licensed applications, hevc video extensions from device manufacturer | Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to elevate privileges locally. | 5 h ago |
| CVE-2026-70289 | 7.8 high | 0.00% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | 5 h ago |
| CVE-2026-70334 | 7.8 high | 0.00% | microsoft, visual studio code | Incomplete list of disallowed inputs in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally. | 5 h ago |
| CVE-2026-69822 | 7.8 high | 0.00% | microsoft, windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 | Numeric truncation error in Windows Kerberos allows an authorized attacker to elevate privileges locally. | 5 h ago |
| CVE-2026-69758 | 7.8 high | 0.00% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. | 5 h ago |
| CVE-2026-69691 | 7.8 high | 0.00% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally. | 5 h ago |
| CVE-2026-69790 | 7.8 high | 0.00% | microsoft, windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 | Heap-based buffer overflow in Windows Credential Providers allows an authorized attacker to elevate privileges locally. | 5 h ago |
| CVE-2026-69594 | 7.8 high | 0.00% | microsoft, windows 11 version 24h2, windows 11 version 25h2, windows 11 version 26h1 | Heap-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally. | 5 h ago |
| CVE-2026-69608 | 7.8 high | 0.00% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Integer overflow or wraparound in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. | 5 h ago |
| CVE-2026-69585 | 7.8 high | 0.00% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Incorrect type conversion or cast in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. | 5 h ago |
| CVE-2026-69541 | 7.8 high | 0.00% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally. | 5 h ago |
| CVE-2026-69534 | 7.8 high | 0.00% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Improper neutralization of special elements used in a command ('command injection') in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally. | 5 h ago |
| CVE-2026-69528 | 7.8 high | 0.00% | microsoft, windows 11 version 23h2, windows 11 version 24h2, windows 11 version 25h2 | Missing authentication for critical function in Windows Shell allows an authorized attacker to elevate privileges locally. | 5 h ago |
| CVE-2026-69582 | 7.8 high | 0.00% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Buffer over-read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally. | 5 h ago |
| CVE-2026-69450 | 7.8 high | 0.00% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Out-of-bounds read in Windows Error Reporting allows an authorized attacker to elevate privileges locally. | 5 h ago |
| CVE-2026-69532 | 7.8 high | 0.00% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally. | 5 h ago |
| CVE-2026-69455 | 7.8 high | 0.00% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally. | 5 h ago |
| CVE-2026-69513 | 7.8 high | 0.00% | microsoft, windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 | Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally. | 5 h ago |
| CVE-2026-69432 | 7.8 high | 0.00% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Heap-based buffer overflow in Volume Manager Driver allows an authorized attacker to elevate privileges locally. | 5 h ago |
| CVE-2026-69436 | 7.8 high | 0.00% | microsoft, windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 | Heap-based buffer overflow in Windows State Repository Service allows an authorized attacker to elevate privileges locally. | 5 h ago |
| CVE-2026-69420 | 7.8 high | 0.00% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Heap-based buffer overflow in Windows VOLSNAP.SYS allows an authorized attacker to elevate privileges locally. | 5 h ago |
| CVE-2026-69391 | 7.8 high | 0.00% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Stack-based buffer overflow in Windows Broker Infrastructure Service allows an authorized attacker to elevate privileges locally. | 5 h ago |
| CVE-2026-69368 | 7.8 high | 0.00% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. | 5 h ago |
| CVE-2026-69389 | 7.8 high | 0.00% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Heap-based buffer overflow in Windows Storage Management Provider allows an authorized attacker to elevate privileges locally. | 5 h ago |
| CVE-2026-69359 | 7.8 high | 0.00% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Heap-based buffer overflow in Active Directory Domain Services allows an authorized attacker to elevate privileges locally. | 5 h ago |
| CVE-2026-69377 | 7.8 high | 0.00% | microsoft, windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 | Missing authorization in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally. | 5 h ago |
| CVE-2026-69307 | 7.8 high | 0.00% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally. | 5 h ago |
| CVE-2026-68892 | 7.8 high | 0.00% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally. | 5 h ago |
| CVE-2026-68890 | 7.8 high | 0.00% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally. | 5 h ago |
Download these 1000 as CSV (the first thousand in this order) · subscribe to this list.
EPSS scores: 2026-10-30. NVD cursor: 2026-10-29 00:22. The News page shows only notable CVEs (KEV, your stack, new criticals, EPSS over 50%, or active exploitation per SSVC); this table has all of them.