104,345 indexed

CVECVE vulnerabilities

104,345 CVEs indexed — newest first. Filter by CVSS severity or CISA KEV listing; KEV-flagged entries surface a rose pill. Authored by Adam Lundqvist.

Showing 10,051–10,100 of 104,345 · page 202 of 2087

IDTitleSummary
CVE-2026-83883CVE-2026-83883
CVSS 7.8
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-83882CVE-2026-83882
CVSS 7.8
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-83881CVE-2026-83881
CVSS 7.8
Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate privileges locally.
CVE-2026-8388CVE-2026-8388
CVSS 6.5mozilla
Incorrect boundary conditions in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 150.0.3, Firefox ESR 115.36, Firefox ESR 140.11,…
CVE-2026-83879CVE-2026-83879
CVSS 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Overlay Filter allows an authorized attacker to elevate …
CVE-2026-83877CVE-2026-83877
CVSS 7.8
Integer overflow or wraparound in HID Parser Library allows an authorized attacker to elevate privileges locally.
CVE-2026-83876CVE-2026-83876
CVSS 7.8
Use after free in Windows Shell allows an authorized attacker to elevate privileges locally.
CVE-2026-83875CVE-2026-83875
CVSS 5.5
Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.
CVE-2026-83874CVE-2026-83874
CVSS 8.8
Heap-based buffer overflow in Windows Event Tracing allows an unauthorized attacker to execute code over a network.
CVE-2026-83873CVE-2026-83873
CVSS 7.8
Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally.
CVE-2026-83872CVE-2026-83872
CVSS 7.8
Incorrect conversion between numeric types in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
CVE-2026-83871CVE-2026-83871
CVSS 7.0
Heap-based buffer overflow in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.
CVE-2026-83870CVE-2026-83870
CVSS 5.5
Out-of-bounds read in Windows Aggregated Data Platform Service allows an authorized attacker to disclose information locally.
CVE-2026-8387CVE-2026-8387
CVSS 2.4
A vulnerability in allegroai/clearml versions up to and including 1.16.5 allows for relative path traversal when extracting `.zip` archives using the `ZipFile.…
CVE-2026-83869CVE-2026-83869
CVSS 9.8microsoft
Integer underflow (wrap or wraparound) in DNS Server allows an unauthorized attacker to execute code over a network.
CVE-2026-83868CVE-2026-83868
CVSS 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Bluetooth Driver allows an authorized attacker to elev…
CVE-2026-83867CVE-2026-83867
CVSS 7.8
Heap-based buffer overflow in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
CVE-2026-83866CVE-2026-83866
CVSS 7.0
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-83865CVE-2026-83865
CVSS 4.7
Relative path traversal in Windows Internet (wininet.dll) allows an authorized attacker to perform tampering locally.
CVE-2026-83864CVE-2026-83864
CVSS 5.5
Improper access control in Windows NTFS allows an authorized attacker to disclose information locally.
CVE-2026-83863CVE-2026-83863
CVSS 7.8
Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.
CVE-2026-83862CVE-2026-83862
CVSS 9.8
Use after free in Windows Network Load Balancing allows an unauthorized attacker to execute code over a network.
CVE-2026-83861CVE-2026-83861
CVSS 7.8
Heap-based buffer overflow in Windows Remote Desktop Protocol allows an authorized attacker to elevate privileges locally.
CVE-2026-83860CVE-2026-83860
CVSS 7.5
Stack-based buffer overflow in Windows GDI allows an unauthorized attacker to deny service over a network.
CVE-2026-8386CVE-2026-8386
CVSS 5.3
The WP Go Maps WordPress plugin before 10.0.10 does not perform any approval-state filtering on its public single-marker REST endpoint, allowing unauthenticat…
CVE-2026-83859CVE-2026-83859
CVSS 7.8
Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVE-2026-83857CVE-2026-83857
CVSS 7.8
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
CVE-2026-83856CVE-2026-83856
CVSS 7.5
Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network.
CVE-2026-83855CVE-2026-83855
CVSS 7.5
Integer underflow (wrap or wraparound) in Windows WLAN Service allows an unauthorized attacker to deny service over a network.
CVE-2026-83854CVE-2026-83854
CVSS 5.5
Improper access control in Windows Notification allows an authorized attacker to disclose information locally.
CVE-2026-83853CVE-2026-83853
CVSS 7.0
Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.
CVE-2026-83852CVE-2026-83852
CVSS 7.0
Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-83851CVE-2026-83851
CVSS 8.8
Heap-based buffer overflow in Windows Partition Management Driver allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-83850CVE-2026-83850
CVSS 7.8
Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
CVE-2026-8385CVE-2026-8385
CVSS 5.3
The WP Go Maps WordPress plugin before 10.0.10 does not properly enforce the marker approval filter on the admin-ajax fallback for its datatables route, allow…
CVE-2026-83849CVE-2026-83849
CVSS 5.5
Out-of-bounds read in Windows Hello allows an authorized attacker to disclose information locally.
CVE-2026-83848CVE-2026-83848
CVSS 7.8
Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83847CVE-2026-83847
CVSS 7.8
Heap-based buffer overflow in Microsoft Account allows an authorized attacker to elevate privileges locally.
CVE-2026-83846CVE-2026-83846
CVSS 7.0
Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.
CVE-2026-83845CVE-2026-83845
CVSS 8.4
Improper privilege management in Windows Internet (wininet.dll) allows an authorized attacker to perform spoofing locally.
CVE-2026-83844CVE-2026-83844
CVSS 8.1
Out-of-bounds read in Windows Paint allows an unauthorized attacker to execute code over a network.
CVE-2026-83843CVE-2026-83843
CVSS 7.5
Out-of-bounds read in Windows Internet Key Exchange (IKE) Protocol allows an unauthorized attacker to deny service over a network.
CVE-2026-83842CVE-2026-83842
CVSS 7.0
Double free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
CVE-2026-83841CVE-2026-83841
CVSS 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K allows an authorized attacker to elevate privileg…
CVE-2026-83840CVE-2026-83840
CVSS 7.8
Weak authentication in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
CVE-2026-8384CVE-2026-8384
CVSS 5.3eclipse
In Eclipse Jetty, an HTTP URI of this form: /public;/../admin/secret.txt results in an unresolved path of: /public/../admin/secret.txt …
CVE-2026-83839CVE-2026-83839
CVSS 7.0
Time-of-check time-of-use (toctou) race condition in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
CVE-2026-83838CVE-2026-83838
CVSS 8.0
Integer underflow (wrap or wraparound) in Windows Bluetooth A2DP driver allows an authorized attacker to elevate privileges over an adjacent network.
CVE-2026-83837CVE-2026-83837
CVSS 7.8
Improper access control in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.
CVE-2026-83836CVE-2026-83836
CVSS 7.8
Heap-based buffer overflow in Windows Event Tracing allows an unauthorized attacker to execute code locally.
Sourced from NVD + CISA KEV + FIRST EPSS. Curated by Adam Lundqvist, Founder at SQUR.