Vulnerabilities
All
My stack
Known exploited
Public exploit
Critical (9+)
Likely exploited (EPSS ≥ 50%)
Changed, 24 h
New, 24 h
Sort:
risk
modified
published
CVSS
EPSS
| CVE | CVSS | EPSS | Vendor, product | Description | Modified |
|---|---|---|---|---|---|
| CVE-2026-32202KEVexploit ×4 | 4.3 medium | 71.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Protection mechanism failure in Windows Shell allows an unauthorized attacker to perform spoofing over a network. | Mon 26 Oct |
| CVE-2026-41089exploit ×12 | 9.8 critical | 80.0% | microsoft, windows_server_2012, windows_server_2016, windows_server_2019 | Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network. | Mon 26 Oct |
| CVE-2026-33829exploit ×3 | 4.3 medium | 4.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Exposure of sensitive information to an unauthorized actor in Windows Snipping Tool allows an unauthorized attacker to perform spoofing over a network. | 14 Oct |
| CVE-2026-33827exploit | 8.1 high | 1.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an unauthorized attacker to execute code over a network. | 14 Oct |
| CVE-2026-27912exploit ×3 | 8.0 high | 0.00% | microsoft, windows_server_2012, windows_server_2016, windows_server_2019 | Improper authorization in Windows Kerberos allows an authorized attacker to elevate privileges over an adjacent network. | Mon 26 Oct |
| CVE-2026-26179exploit | 7.8 high | 0.00% | microsoft, windows_11_23h2, windows_11_24h2, windows_11_25h2 | Double free in Windows Kernel allows an authorized attacker to elevate privileges locally. | Mon 26 Oct |
| CVE-2026-32162 | 8.4 high | 2.0% | microsoft, windows_10_1809, windows_10_21h2, windows_10_22h2 | Acceptance of extraneous untrusted data with trusted data in Windows COM allows an unauthorized attacker to elevate privileges locally. | Mon 26 Oct |
| CVE-2026-27909 | 7.8 high | 2.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. | Mon 26 Oct |
| CVE-2026-27914 | 7.8 high | 2.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Improper access control in Microsoft Management Console allows an authorized attacker to elevate privileges locally. | Mon 26 Oct |
| CVE-2026-27908 | 7.0 high | 2.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Use after free in Windows TDI Translation Driver (tdx.sys) allows an authorized attacker to elevate privileges locally. | Mon 26 Oct |
| CVE-2025-59257 | 6.5 medium | 2.0% | microsoft, windows_11_24h2, windows_11_25h2, windows_server_2022_23h2 | Improper validation of specified type of input in Windows Local Session Manager (LSM) allows an authorized attacker to deny service over a network. | 18 Oct |
| CVE-2026-26169 | 6.1 medium | 2.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Buffer over-read in Windows Kernel Memory allows an authorized attacker to disclose information locally. | Sun 25 Oct |
| CVE-2026-32157 | 8.8 high | 1.0% | microsoft, remote_desktop_client, windows_10_1607, windows_10_1809 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | Mon 26 Oct |
| CVE-2026-32225 | 8.8 high | 1.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a security feature over a network. | 14 Oct |
| CVE-2026-32183 | 7.8 high | 1.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Improper neutralization of special elements used in a command ('command injection') in Windows Snipping Tool allows an unauthorized attacker to execute code locally. | Mon 26 Oct |
| CVE-2026-26154 | 7.5 high | 1.0% | microsoft, windows_server_2012, windows_server_2016, windows_server_2019 | Improper input validation in Windows Server Update Service allows an unauthorized attacker to perform tampering over a network. | Mon 26 Oct |
| CVE-2026-32071 | 7.5 high | 1.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Null pointer dereference in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to deny service over a network. | Mon 26 Oct |
| CVE-2026-33096 | 7.5 high | 1.0% | microsoft, windows_11_23h2, windows_11_24h2, windows_11_25h2 | Out-of-bounds read in Windows HTTP.sys allows an unauthorized attacker to deny service over a network. | 14 Oct |
| CVE-2025-54116 | 7.3 high | 1.0% | microsoft, windows_10_1507, windows_10_1607, windows_10_1809 | Improper access control in Windows MultiPoint Services allows an authorized attacker to elevate privileges locally. | 18 Oct |
| CVE-2026-26151 | 7.1 high | 1.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Insufficient ui warning of dangerous operations in Windows Remote Desktop allows an unauthorized attacker to perform spoofing over a network. | Mon 26 Oct |
| CVE-2026-27921 | 7.0 high | 1.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an authorized attacker to elevate privileges locally. | Mon 26 Oct |
| CVE-2026-32093 | 7.0 high | 1.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Concurrent execution using shared resource with improper synchronization ('race condition') in Function Discovery Service (fdwsd.dll) allows an authorized attacker to elevate privileges locally. | Mon 26 Oct |
| CVE-2026-32151 | 6.5 medium | 1.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Exposure of sensitive information to an unauthorized actor in Windows Shell allows an authorized attacker to disclose information over a network. | Mon 26 Oct |
| CVE-2026-26155 | 6.5 medium | 1.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability | Sun 25 Oct |
| CVE-2025-47979 | 5.5 medium | 1.0% | microsoft, windows_server_2022_23h2, windows_server_2025 | Insertion of sensitive information into log file in Windows Failover Cluster allows an authorized attacker to disclose information locally. | 18 Oct |
| CVE-2026-26178 | 8.8 high | 0.00% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Integer size truncation in Windows Advanced Rasterization Platform (WARP) allows an unauthorized attacker to elevate privileges locally. | Mon 26 Oct |
| CVE-2026-27928 | 8.7 high | 0.00% | microsoft, windows_server_2016, windows_server_2019, windows_server_2022 | Improper input validation in Windows Hello allows an unauthorized attacker to bypass a security feature over a network. | Mon 26 Oct |
| CVE-2026-26159 | 7.8 high | 0.00% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Missing authentication for critical function in Windows Remote Desktop Licensing Service allows an authorized attacker to elevate privileges locally. | Mon 26 Oct |
| CVE-2026-26180 | 7.8 high | 0.00% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. | Mon 26 Oct |
| CVE-2026-27907 | 7.8 high | 0.00% | microsoft, windows_11_23h2, windows_11_24h2, windows_11_25h2 | Integer underflow (wrap or wraparound) in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally. | Mon 26 Oct |
| CVE-2026-32077 | 7.8 high | 0.00% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Untrusted pointer dereference in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally. | Mon 26 Oct |
| CVE-2026-32078 | 7.8 high | 0.00% | microsoft, windows_10_1809, windows_10_21h2, windows_10_22h2 | Use after free in Windows Projected File System allows an authorized attacker to elevate privileges locally. | Mon 26 Oct |
| CVE-2026-32152 | 7.8 high | 0.00% | microsoft, windows_11_23h2, windows_11_24h2, windows_11_25h2 | Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally. | Mon 26 Oct |
| CVE-2026-20930 | 7.8 high | 0.00% | microsoft, windows_10_1809, windows_10_21h2, windows_10_22h2 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Services allows an authorized attacker to elevate privileges locally. | Mon 26 Oct |
| CVE-2026-26153 | 7.8 high | 0.00% | microsoft, windows_10_1809, windows_10_21h2, windows_10_22h2 | Out-of-bounds read in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges locally. | Mon 26 Oct |
| CVE-2026-26156 | 7.8 high | 0.00% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Heap-based buffer overflow in Windows Hyper-V allows an unauthorized attacker to execute code locally. | Mon 26 Oct |
| CVE-2026-26160 | 7.8 high | 0.00% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Missing authentication for critical function in Windows Remote Desktop Licensing Service allows an authorized attacker to elevate privileges locally. | Mon 26 Oct |
| CVE-2026-26161 | 7.8 high | 0.00% | microsoft, windows_10_1809, windows_10_21h2, windows_10_22h2 | Untrusted pointer dereference in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally. | Mon 26 Oct |
| CVE-2026-26162 | 7.8 high | 0.00% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Access of resource using incompatible type ('type confusion') in Windows OLE allows an authorized attacker to elevate privileges locally. | Mon 26 Oct |
| CVE-2026-26167 | 7.8 high | 0.00% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges locally. | Mon 26 Oct |
| CVE-2026-26170 | 7.8 high | 0.00% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Improper input validation in Microsoft PowerShell allows an authorized attacker to elevate privileges locally. | Mon 26 Oct |
| CVE-2026-26172 | 7.8 high | 0.00% | microsoft, windows_10_21h2, windows_10_22h2, windows_11_23h2 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges locally. | Mon 26 Oct |
| CVE-2026-26181 | 7.8 high | 0.00% | microsoft, windows_11_23h2, windows_11_24h2, windows_11_25h2 | Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally. | Mon 26 Oct |
| CVE-2026-26184 | 7.8 high | 0.00% | microsoft, windows_10_1809, windows_10_21h2, windows_10_22h2 | Buffer over-read in Windows Projected File System allows an authorized attacker to elevate privileges locally. | Mon 26 Oct |
| CVE-2026-27910 | 7.8 high | 0.00% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Improper handling of insufficient permissions or privileges in Windows Installer allows an authorized attacker to elevate privileges locally. | Mon 26 Oct |
| CVE-2026-27911 | 7.8 high | 0.00% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows User Interface Core allows an authorized attacker to elevate privileges locally. | Mon 26 Oct |
| CVE-2026-27915 | 7.8 high | 0.00% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally. | Mon 26 Oct |
| CVE-2026-27919 | 7.8 high | 0.00% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Untrusted pointer dereference in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally. | Mon 26 Oct |
| CVE-2026-27920 | 7.8 high | 0.00% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Untrusted pointer dereference in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally. | Mon 26 Oct |
| CVE-2026-27923 | 7.8 high | 0.00% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally. | Mon 26 Oct |
50 of 127 · Next
Download these 127 as CSV · subscribe to this list.
EPSS scores: 2026-10-27. NVD cursor: 2026-10-28 23:22. The News page shows only notable CVEs (KEV, your stack, new criticals, EPSS over 50%, or active exploitation per SSVC); this table has all of them.