Vulnerabilities
All
My stack
Known exploited
Public exploit
Critical (9+)
Likely exploited (EPSS ≥ 50%)
Changed, 24 h
New, 24 h
Sort:
risk
modified
published
CVSS
EPSS
| CVE | CVSS | EPSS | Vendor, product | Description | Modified |
|---|---|---|---|---|---|
| CVE-2026-69374 | 6.5 medium | 1.0% | microsoft, windows 10 version 21h2, windows 10 version 22h2, windows 11 version 23h2 | Allocation of resources without limits or throttling in Windows SMB Server allows an authorized attacker to deny service over a network. | Sat 31 Oct |
| CVE-2026-69297 | 6.5 medium | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows server 2012 | Storing passwords in a recoverable format in Windows DHCP Server allows an authorized attacker to disclose information over a network. | Sat 31 Oct |
| CVE-2026-68898 | 6.5 medium | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Out-of-bounds read in Windows iSCSI allows an unauthorized attacker to deny service over a network. | Sat 31 Oct |
| CVE-2026-62762 | 6.5 medium | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network. | Sat 31 Oct |
| CVE-2026-70019 | 6.5 medium | 1.0% | microsoft, windows 11 version 23h2, windows 11 version 24h2, windows 11 version 25h2 | Windows hard link in Windows Compressed Folder allows an unauthorized attacker to disclose information over a network. | Sat 31 Oct |
| CVE-2026-77896 | 6.5 medium | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Integer overflow or wraparound in Remote Desktop Client allows an unauthorized attacker to deny service over a network. | Sat 31 Oct |
| CVE-2026-72939 | 6.5 medium | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Null pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to deny service over a network. | Sat 31 Oct |
| CVE-2026-69839 | 6.5 medium | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows server 2012 | Uncaught exception in Windows iSCSI Target Service allows an authorized attacker to deny service over a network. | Sat 31 Oct |
| CVE-2026-62801 | 6.5 medium | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Improper limitation of a pathname to a restricted directory ('path traversal') in Windows PowerShell allows an unauthorized attacker to bypass a security feature over a network. | Sat 31 Oct |
| CVE-2026-65794 | 6.5 medium | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Buffer over-read in Windows SMB Client allows an unauthorized attacker to disclose information over a network. | Fri 30 Oct |
| CVE-2026-62814 | 6.5 medium | 1.0% | microsoft, windows server 2012, windows server 2012 (server core installation), windows server 2012 r2 | Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network. | Fri 30 Oct |
| CVE-2026-62782 | 6.5 medium | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Out-of-bounds read in Windows SMB Client allows an unauthorized attacker to disclose information over a network. | Fri 30 Oct |
| CVE-2026-62714 | 6.5 medium | 1.0% | microsoft, windows server 2012, windows server 2012 (server core installation), windows server 2012 r2 | Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network. | Fri 30 Oct |
| CVE-2026-62720 | 6.5 medium | 1.0% | microsoft, windows server 2012, windows server 2012 (server core installation), windows server 2012 r2 | Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network. | Fri 30 Oct |
| CVE-2026-61921 | 6.5 medium | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network. | Fri 30 Oct |
| CVE-2026-61918 | 6.5 medium | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network. | Fri 30 Oct |
| CVE-2026-65785 | 6.5 medium | 1.0% | microsoft, windows 11 version 24h2, windows 11 version 25h2, windows 11 version 26h1 | Uncontrolled resource consumption in Windows DHCP Client allows an unauthorized attacker to deny service over an adjacent network. | Fri 30 Oct |
| CVE-2026-62750 | 6.5 medium | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Partial string comparison in Windows HTTP Protocol Stack allows an unauthorized attacker to perform tampering over an adjacent network. | Fri 30 Oct |
| CVE-2026-62745 | 6.5 medium | 1.0% | microsoft, windows server 2012, windows server 2012 (server core installation), windows server 2012 r2 | Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network. | Fri 30 Oct |
| CVE-2026-62742 | 6.5 medium | 1.0% | microsoft, windows server 2012, windows server 2012 (server core installation), windows server 2012 r2 | Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network. | Fri 30 Oct |
| CVE-2026-62716 | 6.5 medium | 1.0% | microsoft, windows server 2012, windows server 2012 (server core installation), windows server 2012 r2 | Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network. | Fri 30 Oct |
| CVE-2026-62715 | 6.5 medium | 1.0% | microsoft, windows server 2012 r2, windows server 2012 r2 (server core installation), windows server 2016 | Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network. | Fri 30 Oct |
| CVE-2026-62718 | 6.5 medium | 1.0% | microsoft, windows server 2012, windows server 2012 (server core installation), windows server 2012 r2 | Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network. | Fri 30 Oct |
| CVE-2026-61924 | 6.5 medium | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network. | Fri 30 Oct |
| CVE-2026-61345 | 6.5 medium | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Null pointer dereference in Microsoft Remote Registry Service allows an authorized attacker to deny service over a network. | Fri 30 Oct |
| CVE-2026-59138 | 6.5 medium | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Null pointer dereference in Microsoft Remote Registry Service allows an authorized attacker to deny service over a network. | Fri 30 Oct |
| CVE-2026-8109 | 6.5 medium | 1.0% | ivanti, endpoint_manager | An exposed dangerous method on the Core Server of Ivanti Endpoint Manager before version 2024 SU6 allows a remote authenticated attacker to leak access credentials. | Mon 26 Oct |
| CVE-2026-24330 | 6.5 medium | 1.0% | no CPE yet | A flaw was found in wildfly-core. A remote attacker, authenticated as a 'deployer' account, can import and deploy a malicious archive file from an untrusted source. This is achieved by leveraging WildFly libraries to craft a Java project that allows an HTTP POST request to upload and deploy the malicious archive. This could lead to further exploitation, such as arbitrary file read vulnerabilities. | 23 Oct |
| CVE-2025-58782 | 6.5 medium | 1.0% | apache, jackrabbit | Deserialization of Untrusted Data vulnerability in Apache Jackrabbit Core and Apache Jackrabbit JCR Commons. This issue affects Apache Jackrabbit Core: from 1.0.0 through 2.22.1; Apache Jackrabbit JCR Commons: from 1.0.0 through 2.22.1. Deployments that accept JNDI URIs for JCR lookup from untrusted users allows them to inject malicious JNDI references, potentially leading to arbitrary code execution through deserialization of untrusted data. Users are recommended to upgrade to version 2.22.2. JCR lookup through JNDI has been disabled by default in 2.22.2. Users of this feature need to enable it explicitly and are adviced to review their use of JNDI URI for JCR lookup. | 18 Oct |
| CVE-2025-54831 | 6.5 medium | 1.0% | apache, airflow | Apache Airflow 3 introduced a change to the handling of sensitive information in Connections. The intent was to restrict access to sensitive connection fields to Connection Editing Users, effectively applying a "write-only" model for sensitive values. In Airflow 3.0.3, this model was unintentionally violated: sensitive connection information could be viewed by users with READ permissions through both the API and the UI. This behavior also bypassed the `AIRFLOW__CORE__HIDE_SENSITIVE_VAR_CONN_FIELDS` configuration option. This issue does not affect Airflow 2.x, where exposing sensitive information to connection editors was the intended and documented behavior. Users of Airflow 3.0.3 are advised to upgrade Airflow to >=3.0.4. | 11 Oct |
| CVE-2026-57097 | 6.4 medium | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Untrusted search path in Microsoft XML allows an unauthorized attacker to bypass a security feature with a physical attack. | 2 h ago |
| CVE-2026-34477 | 6.3 medium | 1.0% | apache, log4j | The fix for CVE-2025-68161 https://logging.apache.org/security.html#CVE-2025-68161 was incomplete: it addressed hostname verification only when enabled via the log4j2.sslVerifyHostName https://logging.apache.org/log4j/2.x/manual/systemproperties.html#log4j2.sslVerifyHostName system property, but not when configured through the verifyHostName https://logging.apache.org/log4j/2.x/manual/appenders/network.html#SslConfiguration-attr-verifyHostName attribute of the <Ssl> element. Although the verifyHostName configuration attribute was introduced in Log4j Core 2.12.0, it was silently ignored in all versions through 2.25.3, leaving TLS connections vulnerable to interception regardless of the configured value. A network-based attacker may be able to perform a man-in-the-middle attack when all of the following conditions are met: * An SMTP, Socket, or Syslog appender is in use. * TLS is configured via a nested <Ssl> element. * The attacker can present a certificate issued by a CA trusted by the appender's configured trust store, or by the default Java trust store if none is configured. This issue does not affect users of the HTTP appender, which uses a separate verifyHostname https://logging.apache.org/log4j/2.x/manual/appenders/network.html#HttpAppender-attr-verifyHostName attribute that was not subject to this bug and verifies host names by default. Users are advised to upgrade to Apache Log4j Core 2.25.4, which corrects this issue. | Mon 26 Oct |
| CVE-2026-49807 | 6.2 medium | 1.0% | microsoft, windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 | Exposure of sensitive information to an unauthorized actor in Windows DirectX allows an unauthorized attacker to disclose information locally. | 2 h ago |
| CVE-2026-50294 | 6.2 medium | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an unauthorized attacker to disclose information locally. | 2 h ago |
| CVE-2026-50453 | 6.1 medium | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Out-of-bounds read in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker to disclose information with a physical attack. | 2 h ago |
| CVE-2026-56649 | 5.9 medium | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Network File System allows an unauthorized attacker to execute code over a network. | 2 h ago |
| CVE-2026-50324 | 5.9 medium | 1.0% | microsoft, microsoft .net framework 3.5 and 4.7.2, microsoft .net framework 3.5 and 4.8, microsoft .net framework 3.5 and 4.8.1 | Loop with unreachable exit condition ('infinite loop') in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network. | 2 h ago |
| CVE-2026-69304 | 5.9 medium | 1.0% | microsoft, .net 10.0 runtime, .net 8.0 runtime, .net 9.0 runtime | Improper handling of highly compressed data (data amplification) in ASP.NET Core allows an unauthorized attacker to deny service over a network. | Sat 31 Oct |
| CVE-2026-69803 | 5.9 medium | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows server 2012 | Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to disclose information over a network. | Sat 31 Oct |
| CVE-2026-78523 | 5.9 medium | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows server 2012 | Use after free in Windows DNS allows an unauthorized attacker to deny service over a network. | Sat 31 Oct |
| CVE-2026-72978 | 5.9 medium | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows server 2012 | Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network. | Sat 31 Oct |
| CVE-2026-70124 | 5.9 medium | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows server 2012 | Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to disclose information over a network. | Sat 31 Oct |
| CVE-2026-69930 | 5.9 medium | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows server 2012 | Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to disclose information over a network. | Sat 31 Oct |
| CVE-2026-69929 | 5.9 medium | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows server 2012 | Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to disclose information over a network. | Sat 31 Oct |
| CVE-2026-70091 | 5.9 medium | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows server 2012 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DNS allows an unauthorized attacker to deny service over a network. | Sat 31 Oct |
| CVE-2026-68819 | 5.9 medium | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows server 2012 | Buffer over-read in Windows Network File System allows an unauthorized attacker to deny service over a network. | Fri 30 Oct |
| CVE-2026-70196 | 5.9 medium | 1.0% | no CPE yet | Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to deny service over a network. | 19 Oct |
| CVE-2026-75514 | 5.9 medium | 1.0% | no CPE yet | BunkerWeb is an open-source, next-generation Web Application Firewall. Prior to 1.6.13, the blacklist, greylist, and antibot modules in src/common/core/blacklist/blacklist.lua, src/common/core/greylist/greylist.lua, and src/common/core/antibot/antibot.lua trust PTR suffix matches in IGNORE_RDNS, GREYLIST_RDNS, and ANTIBOT_IGNORE_RDNS without using get_ips to confirm that the hostname resolves to the client address. An unauthenticated remote attacker who controls a PTR record can spoof a trusted suffix to bypass rDNS-based blacklisting, gain greylist treatment, or skip an antibot challenge. This issue is fixed in version 1.6.13. | 18 Oct |
| CVE-2026-69679 | 5.7 medium | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows server 2012 | Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network. | Sat 31 Oct |
| CVE-2026-69637 | 5.7 medium | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows server 2012 | Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network. | Sat 31 Oct |
Download these 1000 as CSV (the first thousand in this order) · subscribe to this list.
EPSS scores: 2026-10-31. NVD cursor: 2026-10-29 00:22. The News page shows only notable CVEs (KEV, your stack, new criticals, EPSS over 50%, or active exploitation per SSVC); this table has all of them.