Vulnerabilities
All
My stack
Known exploited
Public exploit
Critical (9+)
Likely exploited (EPSS ≥ 50%)
Changed, 24 h
New, 24 h
Sort:
risk
modified
published
CVSS
EPSS
| CVE | CVSS | EPSS | Vendor, product | Description | Modified |
|---|---|---|---|---|---|
| CVE-2026-32202KEVexploit ×4 | 4.3 medium | 71.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Protection mechanism failure in Windows Shell allows an unauthorized attacker to perform spoofing over a network. | Mon 26 Oct |
| CVE-2020-1054KEVexploit ×5 | 7.0 high | 54.0% | microsoft, windows_10_1507, windows_10_1607, windows_10_1709 | An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take control of an affected system. The update addresses this vulnerability by correcting how the Windows kernel-mode driver handles objects in memory. | 8 Oct |
| CVE-2026-68820KEVexploit ×4 | 7.0 high | 9.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. | Mon 26 Oct |
| CVE-2026-96951KEVexploited | 8.8 high | 10.0% | microsoft, outlook_web, windows_10_1607, windows_10_1809 | Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a security feature over a network. | 16 Oct |
| CVE-2026-56155KEV | 7.8 high | 0.00% | microsoft, windows 10 version 1607, windows 10 version 1809, windows server 2012 | Insufficient granularity of access control in Active Directory Federation Services (AD FS) allows an authorized attacker to elevate privileges locally. | Wed 28 Oct |
| CVE-2026-33829exploit ×3 | 4.3 medium | 4.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Exposure of sensitive information to an unauthorized actor in Windows Snipping Tool allows an unauthorized attacker to perform spoofing over a network. | 14 Oct |
| CVE-2026-56190exploit ×3 | 9.8 critical | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Use of uninitialized resource in Windows RDP allows an unauthorized attacker to execute code over a network. | Wed 28 Oct |
| CVE-2026-54121exploit ×17 | 8.8 high | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows server 2012 | Improper authorization in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges over a network. | Wed 28 Oct |
| CVE-2026-50369exploit | 8.8 high | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Use after free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges over a network. | Wed 28 Oct |
| CVE-2026-49179exploit | 8.8 high | 1.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Improper neutralization of special elements used in a command ('command injection') in Windows Active Directory allows an unauthorized attacker to execute code over a network. | 24 Oct |
| CVE-2026-33827exploit | 8.1 high | 1.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an unauthorized attacker to execute code over a network. | 14 Oct |
| CVE-2026-69451exploit | 7.1 high | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Use after free in Windows Management Instrumentation allows an authorized attacker to elevate privileges over a network. | 8 h ago |
| CVE-2026-34348exploit | 6.5 medium | 1.0% | microsoft, windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 | Protection mechanism failure in Windows Event Logging Service allows an authorized attacker to disclose information over a network. | Wed 28 Oct |
| CVE-2026-54107exploit | 8.8 high | 0.00% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K allows an authorized attacker to elevate privileges locally. | Wed 28 Oct |
| CVE-2026-54992exploit | 8.4 high | 0.00% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Heap-based buffer overflow in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code locally. | Wed 28 Oct |
| CVE-2026-69328exploit | 7.8 high | 0.00% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Untrusted search path in Windows Storage allows an authorized attacker to elevate privileges locally. | 8 h ago |
| CVE-2026-62735exploit ×2 | 7.8 high | 0.00% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally. | Fri 30 Oct |
| CVE-2026-54984exploit | 7.8 high | 0.00% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code locally. | Fri 30 Oct |
| CVE-2026-50402exploit | 7.8 high | 0.00% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Incorrect conversion between numeric types in Windows NTFS allows an authorized attacker to elevate privileges locally. | Wed 28 Oct |
| CVE-2026-50343exploit | 7.8 high | 0.00% | microsoft, windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 | Improper privilege management in Microsoft Install Service allows an authorized attacker to elevate privileges locally. | Wed 28 Oct |
| CVE-2026-58635exploit | 7.8 high | 0.00% | microsoft, windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 | Improper neutralization of special elements used in a command ('command injection') in Windows Narrator Braille allows an authorized attacker to elevate privileges locally. | Wed 28 Oct |
| CVE-2026-49176exploit ×2 | 7.8 high | 0.00% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Improper privilege management in Windows WalletService allows an authorized attacker to elevate privileges locally. | Wed 28 Oct |
| CVE-2026-66804exploit ×4 | 7.8 high | 0.00% | microsoft, windows 10 version 22h2, windows 11 version 24h2, windows 11 version 25h2 | Improper access control in Windows Cross Device Service allows an authorized attacker to elevate privileges locally. | 21 Oct |
| CVE-2026-97798exploit ×2 | 7.8 high | 0.00% | microsoft, windows_10_21h2, windows_10_22h2, windows_11_23h2 | Improper neutralization of argument delimiters in a command ('argument injection') in Windows Error Reporting allows an authorized attacker to elevate privileges locally. | 16 Oct |
| CVE-2026-83834exploit | 7.0 high | 0.00% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally. | Tue 27 Oct |
| CVE-2026-83991exploit ×2 | 5.5 medium | 0.00% | microsoft, windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 | Missing authentication for critical function in Windows Cloud Files Mini Filter Driver allows an authorized attacker to perform tampering locally. | 8 h ago |
| CVE-2015-2423 | 4.3 medium | 20.0% | microsoft, excel, office, powerpoint | Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, Windows 10, Excel 2007 SP3, PowerPoint 2007 SP3, Visio 2007 SP3, Word 2007 SP3, Office 2010 SP2, Excel 2010 SP2, PowerPoint 2010 SP2, Visio 2010 SP2, Word 2010 SP2, Excel 2013 SP1, PowerPoint 2013 SP1, Visio 2013 SP1, Word 2013 SP1, Excel 2013 RT SP1, PowerPoint 2013 RT SP1, Visio 2013 RT SP1, Word 2013 RT SP1, and Internet Explorer 7 through 11 allow remote attackers to gain privileges and obtain sensitive information via a crafted command-line parameter to an Office application or Notepad, as demonstrated by a transition from Low Integrity to Medium Integrity, aka "Unsafe Command Line Parameter Passing Vulnerability." | 14 Oct |
| CVE-2026-50509 | 7.8 high | 4.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Deserialization of untrusted data in Windows Wireless Wide Area Network Service allows an authorized attacker to elevate privileges locally. | Wed 28 Oct |
| CVE-2026-88091 | 7.8 high | 3.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Deserialization of untrusted data in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally. | 16 Oct |
| CVE-2026-69694 | 7.0 high | 3.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Deserialization of untrusted data in Windows IP Address Management (IPAM) Service allows an authorized attacker to elevate privileges locally. | 8 h ago |
| CVE-2020-26140 | 6.5 medium | 3.0% | alfa, siemens, awus036h_firmware, scalance_w1748-1_firmware, scalance_w1750d_firmware | An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. The WEP, WPA, WPA2, and WPA3 implementations accept plaintext frames in a protected Wi-Fi network. An adversary can abuse this to inject arbitrary data frames independent of the network configuration. | 8 Oct |
| CVE-2026-32162 | 8.4 high | 2.0% | microsoft, windows_10_1809, windows_10_21h2, windows_10_22h2 | Acceptance of extraneous untrusted data with trusted data in Windows COM allows an unauthorized attacker to elevate privileges locally. | Mon 26 Oct |
| CVE-2022-24545 | 8.1 high | 2.0% | microsoft, windows_10, windows_11, windows_server_2016 | Windows Kerberos Remote Code Execution Vulnerability | 8 Oct |
| CVE-2026-27909 | 7.8 high | 2.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. | Mon 26 Oct |
| CVE-2026-27914 | 7.8 high | 2.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Improper access control in Microsoft Management Console allows an authorized attacker to elevate privileges locally. | Mon 26 Oct |
| CVE-2026-96186 | 7.8 high | 2.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Deserialization of untrusted data in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally. | 16 Oct |
| CVE-2026-27908 | 7.0 high | 2.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Use after free in Windows TDI Translation Driver (tdx.sys) allows an authorized attacker to elevate privileges locally. | Mon 26 Oct |
| CVE-2026-26169 | 6.1 medium | 2.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Buffer over-read in Windows Kernel Memory allows an authorized attacker to disclose information locally. | Sun 25 Oct |
| CVE-2026-57092 | 9.9 critical | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Use after free in Windows VMSwitch allows an authorized attacker to elevate privileges over a network. | Wed 28 Oct |
| CVE-2026-73025 | 9.8 critical | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows server 2012 | Weak authentication in Windows iSCSI allows an unauthorized attacker to bypass a security feature over a network. | 8 h ago |
| CVE-2026-73010 | 9.8 critical | 1.0% | microsoft, windows 10 version 1809, windows server 2019, windows server 2019 (server core installation) | Use after free in Windows Failover Cluster allows an unauthorized attacker to execute code over a network. | 8 h ago |
| CVE-2026-73009 | 9.8 critical | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network. | 8 h ago |
| CVE-2026-70296 | 9.8 critical | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Out-of-bounds write in Windows Imaging Component allows an unauthorized attacker to execute code over a network. | 8 h ago |
| CVE-2026-69590 | 9.8 critical | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine | 8 h ago |
| CVE-2026-69910 | 9.8 critical | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Stack-based buffer overflow in Windows Hyper-V allows an unauthorized attacker to execute code over a network. | 8 h ago |
| CVE-2026-69769 | 9.8 critical | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Heap-based buffer overflow in Windows HTTP Print Provider allows an unauthorized attacker to execute code over a network. | 8 h ago |
| CVE-2026-69829 | 9.8 critical | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network. | 8 h ago |
| CVE-2026-69845 | 9.8 critical | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows server 2012 | Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network. | 8 h ago |
| CVE-2026-69824 | 9.8 critical | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Integer underflow (wrap or wraparound) in Microsoft Standard XPS allows an unauthorized attacker to execute code over a network. | 8 h ago |
| CVE-2026-69768 | 9.8 critical | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Heap-based buffer overflow in Windows RNDIS allows an unauthorized attacker to execute code over a network. | 8 h ago |
50 of 1966 · Next
Download these 1000 as CSV (the first thousand in this order) · subscribe to this list.
EPSS scores: 2026-10-30. NVD cursor: 2026-10-29 00:22. The News page shows only notable CVEs (KEV, your stack, new criticals, EPSS over 50%, or active exploitation per SSVC); this table has all of them.