Vulnerabilities
All
My stack
Known exploited
Public exploit
Critical (9+)
Likely exploited (EPSS ≥ 50%)
Changed, 24 h
New, 24 h
Sort:
risk
modified
published
CVSS
EPSS
| CVE | CVSS | EPSS | Vendor, product | Description | Modified |
|---|---|---|---|---|---|
| CVE-2026-32202KEVexploit ×4 | 4.3 medium | 71.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Protection mechanism failure in Windows Shell allows an unauthorized attacker to perform spoofing over a network. | Mon 26 Oct |
| CVE-2020-1054KEVexploit ×5 | 7.0 high | 54.0% | microsoft, windows_10_1507, windows_10_1607, windows_10_1709 | An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take control of an affected system. The update addresses this vulnerability by correcting how the Windows kernel-mode driver handles objects in memory. | 8 Oct |
| CVE-2026-68820KEVexploit ×4 | 7.0 high | 0.00% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. | Mon 26 Oct |
| CVE-2026-96951KEVexploited | 8.8 high | 10.0% | microsoft, outlook_web, windows_10_1607, windows_10_1809 | Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a security feature over a network. | 16 Oct |
| CVE-2026-41089exploit ×12 | 9.8 critical | 80.0% | microsoft, windows_server_2012, windows_server_2016, windows_server_2019 | Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network. | Mon 26 Oct |
| CVE-2017-8529exploit | 6.5 medium | 14.0% | microsoft, internet_explorer, edge | Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, and Windows Server 2012 and R2 allow an attacker to detect specific files on the user's computer when affected Microsoft scripting engines do not properly handle objects in memory, aka "Microsoft Browser Information Disclosure Vulnerability". | 8 Oct |
| CVE-2026-33829exploit ×3 | 4.3 medium | 4.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Exposure of sensitive information to an unauthorized actor in Windows Snipping Tool allows an unauthorized attacker to perform spoofing over a network. | 14 Oct |
| CVE-2026-56190exploit ×2 | 9.8 critical | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Use of uninitialized resource in Windows RDP allows an unauthorized attacker to execute code over a network. | 12 h ago |
| CVE-2026-62878exploit | 9.8 critical | 1.0% | microsoft, windows server 2012, windows server 2012 (server core installation), windows server 2012 r2 | Stack-based buffer overflow in Windows DNS allows an unauthorized attacker to execute code over a network. | 12 h ago |
| CVE-2026-54121exploit ×15 | 8.8 high | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows server 2012 | Improper authorization in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges over a network. | 12 h ago |
| CVE-2026-50369exploit | 8.8 high | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Use after free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges over a network. | 12 h ago |
| CVE-2026-49179exploit | 8.8 high | 1.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Improper neutralization of special elements used in a command ('command injection') in Windows Active Directory allows an unauthorized attacker to execute code over a network. | Sat 24 Oct |
| CVE-2026-33827exploit | 8.1 high | 1.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an unauthorized attacker to execute code over a network. | 14 Oct |
| CVE-2026-54107exploit | 8.8 high | 0.00% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K allows an authorized attacker to elevate privileges locally. | 12 h ago |
| CVE-2026-54992exploit | 8.4 high | 0.00% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Heap-based buffer overflow in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code locally. | 12 h ago |
| CVE-2026-27912exploit ×3 | 8.0 high | 0.00% | microsoft, windows_server_2012, windows_server_2016, windows_server_2019 | Improper authorization in Windows Kerberos allows an authorized attacker to elevate privileges over an adjacent network. | Mon 26 Oct |
| CVE-2026-62735exploit ×2 | 7.8 high | 0.00% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally. | 12 h ago |
| CVE-2026-54984exploit | 7.8 high | 0.00% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code locally. | 12 h ago |
| CVE-2026-50402exploit | 7.8 high | 0.00% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Incorrect conversion between numeric types in Windows NTFS allows an authorized attacker to elevate privileges locally. | 12 h ago |
| CVE-2015-2423 | 4.3 medium | 20.0% | microsoft, excel, office, powerpoint | Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, Windows 10, Excel 2007 SP3, PowerPoint 2007 SP3, Visio 2007 SP3, Word 2007 SP3, Office 2010 SP2, Excel 2010 SP2, PowerPoint 2010 SP2, Visio 2010 SP2, Word 2010 SP2, Excel 2013 SP1, PowerPoint 2013 SP1, Visio 2013 SP1, Word 2013 SP1, Excel 2013 RT SP1, PowerPoint 2013 RT SP1, Visio 2013 RT SP1, Word 2013 RT SP1, and Internet Explorer 7 through 11 allow remote attackers to gain privileges and obtain sensitive information via a crafted command-line parameter to an Office application or Notepad, as demonstrated by a transition from Low Integrity to Medium Integrity, aka "Unsafe Command Line Parameter Passing Vulnerability." | 14 Oct |
| CVE-2026-88091 | 7.8 high | 3.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Deserialization of untrusted data in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally. | 16 Oct |
| CVE-2026-27909 | 7.8 high | 2.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. | Mon 26 Oct |
| CVE-2026-27914 | 7.8 high | 2.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Improper access control in Microsoft Management Console allows an authorized attacker to elevate privileges locally. | Mon 26 Oct |
| CVE-2026-96186 | 7.8 high | 2.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Deserialization of untrusted data in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally. | 16 Oct |
| CVE-2026-27908 | 7.0 high | 2.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Use after free in Windows TDI Translation Driver (tdx.sys) allows an authorized attacker to elevate privileges locally. | Mon 26 Oct |
| CVE-2026-57092 | 9.9 critical | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Use after free in Windows VMSwitch allows an authorized attacker to elevate privileges over a network. | 12 h ago |
| CVE-2026-65791 | 9.8 critical | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows server 2012 | Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a network. | 12 h ago |
| CVE-2026-56188 | 9.8 critical | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Server Network driver allows an unauthorized attacker to execute code over a network. | 12 h ago |
| CVE-2026-62893 | 9.8 critical | 1.0% | microsoft, windows server 2012, windows server 2012 (server core installation), windows server 2012 r2 | Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network. | 12 h ago |
| CVE-2026-56159 | 9.8 critical | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows server 2012 | Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network. | 12 h ago |
| CVE-2026-50518 | 9.8 critical | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows server 2012 | Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network. | 12 h ago |
| CVE-2026-50447 | 9.8 critical | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Heap-based buffer overflow in Windows Message Queuing allows an unauthorized attacker to execute code over a network. | 12 h ago |
| CVE-2026-83789 | 9.8 critical | 1.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Heap-based buffer overflow in Windows SMB Client allows an unauthorized attacker to elevate privileges over a network. | 12 h ago |
| CVE-2026-42990 | 9.8 critical | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Heap-based buffer overflow in SQL Server ODBC driver allows an unauthorized attacker to execute code over a network. | 12 h ago |
| CVE-2026-70153 | 9.8 critical | 1.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over a network. | 15 h ago |
| CVE-2026-70147 | 9.8 critical | 1.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over a network. | 15 h ago |
| CVE-2026-70262 | 9.8 critical | 1.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Heap-based buffer overflow in WebDAV allows an unauthorized attacker to elevate privileges over a network. | 15 h ago |
| CVE-2026-70275 | 9.8 critical | 1.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Untrusted pointer dereference in Windows CD-ROM Driver allows an unauthorized attacker to execute code over a network. | 15 h ago |
| CVE-2026-70157 | 9.8 critical | 1.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Heap-based buffer overflow in Windows System Information Console allows an unauthorized attacker to execute code over a network. | 15 h ago |
| CVE-2026-96864 | 9.8 critical | 1.0% | microsoft, windows_10_1607, windows_10_1809, windows_server_2012 | Double free in Microsoft Failover Cluster Virtual Driver allows an unauthorized attacker to execute code over a network. | 15 h ago |
| CVE-2026-85928 | 9.8 critical | 1.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network. | 15 h ago |
| CVE-2026-105723 | 9.8 critical | 1.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Untrusted pointer dereference in Windows Distributed File System (DFS) allows an unauthorized attacker to elevate privileges over a network. | Mon 26 Oct |
| CVE-2026-69634 | 9.8 critical | 1.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network. | Mon 26 Oct |
| CVE-2026-105010 | 9.8 critical | 1.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Use after free in Microsoft Windows Search Component allows an unauthorized attacker to elevate privileges over a network. | Mon 26 Oct |
| CVE-2026-83888 | 9.8 critical | 1.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Buffer over-read in Windows CD-ROM Driver allows an unauthorized attacker to elevate privileges over a network. | 21 Oct |
| CVE-2026-100202 | 9.8 critical | 1.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network. | 20 Oct |
| CVE-2026-100222 | 9.8 critical | 1.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Heap-based buffer overflow in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network. | 20 Oct |
| CVE-2026-83935 | 9.8 critical | 1.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Heap-based buffer overflow in Microsoft XML allows an unauthorized attacker to execute code over a network. | 19 Oct |
| CVE-2026-84015 | 9.8 critical | 1.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Heap-based buffer overflow in Remote Access Point-to-Point Protocol (PPP) EAP-TLS allows an unauthorized attacker to execute code over a network. | 19 Oct |
| CVE-2026-69883 | 9.8 critical | 1.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network. | 19 Oct |
50 of 912 · Next
Download these 912 as CSV · subscribe to this list.
EPSS scores: 2026-10-28. NVD cursor: 2026-10-29 00:22. The News page shows only notable CVEs (KEV, your stack, new criticals, EPSS over 50%, or active exploitation per SSVC); this table has all of them.