104,345 indexed

CVECVE vulnerabilities

104,345 CVEs indexed — newest first. Filter by CVSS severity or CISA KEV listing; KEV-flagged entries surface a rose pill. Authored by Adam Lundqvist.

Showing 10,001–10,050 of 104,345 · page 201 of 2087

IDTitleSummary
CVE-2026-83932CVE-2026-83932
CVSS 7.8
Heap-based buffer overflow in Windows Group Policy allows an authorized attacker to elevate privileges locally.
CVE-2026-83931CVE-2026-83931
CVSS 7.8
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.
CVE-2026-83930CVE-2026-83930
CVSS 7.0
Use after free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83929CVE-2026-83929
CVSS 8.8
Out-of-bounds write in Windows GDI allows an unauthorized attacker to execute code over a network.
CVE-2026-83928CVE-2026-83928
CVSS 8.8
Out-of-bounds write in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to execute code over a network.
CVE-2026-83927CVE-2026-83927
CVSS 7.8
Improper link resolution before file access ('link following') in Windows Registry allows an authorized attacker to elevate privileges locally.
CVE-2026-83926CVE-2026-83926
CVSS 4.4
Improper certificate validation in Windows Hello allows an authorized attacker to bypass a security feature locally.
CVE-2026-83925CVE-2026-83925
CVSS 4.7
Use of uninitialized resource in Windows Kernel allows an authorized attacker to disclose information locally.
CVE-2026-83924CVE-2026-83924
CVSS 7.0
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-83923CVE-2026-83923
CVSS 8.8
Relative path traversal in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.
CVE-2026-83922CVE-2026-83922
CVSS 7.8
Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
CVE-2026-83921CVE-2026-83921
CVSS 7.0
Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
CVE-2026-83920CVE-2026-83920
CVSS 7.8
Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
CVE-2026-83919CVE-2026-83919
CVSS 7.8
Heap-based buffer overflow in Microsoft Internet Messaging API allows an authorized attacker to execute code locally.
CVE-2026-83918CVE-2026-83918
CVSS 7.8
Integer overflow or wraparound in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-83917CVE-2026-83917
CVSS 7.0
Use after free in Windows ALPC allows an authorized attacker to elevate privileges locally.
CVE-2026-83916CVE-2026-83916
CVSS 7.0
Double free in Windows Error Reporting allows an authorized attacker to execute code locally.
CVE-2026-83915CVE-2026-83915
CVSS 7.0
Use after free in Windows Diagnostic Policy Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83914CVE-2026-83914
CVSS 8.1
Use after free in Microsoft XML allows an unauthorized attacker to execute code over a network.
CVE-2026-83913CVE-2026-83913
CVSS 7.8
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-83912CVE-2026-83912
CVSS 7.8
Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
CVE-2026-83911CVE-2026-83911
CVSS 7.0
Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.
CVE-2026-83910CVE-2026-83910
CVSS 9.8
Out-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code over a network.
CVE-2026-8391CVE-2026-8391
CVSS 5.3mozilla
Other issue in the JavaScript Engine component. This vulnerability was fixed in Firefox 150.0.3, Firefox ESR 115.36, Firefox ESR 140.11, and Thunderbird 140.11.
CVE-2026-83909CVE-2026-83909
CVSS 4.7
Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose informat…
CVE-2026-83908CVE-2026-83908
CVSS 7.0
Release of invalid pointer or reference in RPC Runtime allows an authorized attacker to elevate privileges locally.
CVE-2026-83907CVE-2026-83907
CVSS 5.5
Exposure of sensitive system information to an unauthorized control sphere in Windows Hello allows an authorized attacker to disclose information locally.
CVE-2026-83906CVE-2026-83906
CVSS 6.5
Incorrect implementation of authentication algorithm in Windows Shell allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-83905CVE-2026-83905
CVSS 4.7
Exposure of sensitive system information to an unauthorized control sphere in Windows Shell allows an authorized attacker to disclose information locally.
CVE-2026-83904CVE-2026-83904
CVSS 5.5
Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.
CVE-2026-83903CVE-2026-83903
CVSS 7.8
Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
CVE-2026-83902CVE-2026-83902
CVSS 7.8
Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
CVE-2026-83901CVE-2026-83901
CVSS 7.0
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
CVE-2026-83900CVE-2026-83900
CVSS 7.0
Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-8390CVE-2026-8390
CVSS 7.3mozilla
Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 150.0.3.
CVE-2026-83899CVE-2026-83899
CVSS 7.0
Improper privilege management in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-83898CVE-2026-83898
CVSS 5.5
Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.
CVE-2026-83897CVE-2026-83897
CVSS 4.7
Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose informat…
CVE-2026-83896CVE-2026-83896
CVSS 7.8
Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
CVE-2026-83895CVE-2026-83895
CVSS 6.8
Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an unauthorized attacker to elevate privileges with a physical attack.
CVE-2026-83893CVE-2026-83893
CVSS 5.5
Exposure of sensitive system information to an unauthorized control sphere in Windows Clipboard User Service allows an authorized attacker to disclose informat…
CVE-2026-83892CVE-2026-83892
CVSS 5.5
Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.
CVE-2026-83891CVE-2026-83891
CVSS 8.8microsoft
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-8389CVE-2026-8389
CVSS 8.8mozilla
JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 150.0.3.
CVE-2026-83889CVE-2026-83889
CVSS 8.8microsoft
Release of invalid pointer or reference in DNS Server allows an authorized attacker to execute code over a network.
CVE-2026-83888CVE-2026-83888
CVSS 6.5
Buffer over-read in Windows CD-ROM Driver allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-83887CVE-2026-83887
CVSS 5.5
Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.
CVE-2026-83886CVE-2026-83886
CVSS 7.0
Use after free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83885CVE-2026-83885
CVSS 5.6
Inadequate encryption strength in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to perform spoofing locally.
CVE-2026-83884CVE-2026-83884
CVSS 5.5
Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.
Sourced from NVD + CISA KEV + FIRST EPSS. Curated by Adam Lundqvist, Founder at SQUR.