CVE Feed

    Dashboard / CVE

    7.5
    High

    CVE-2026-70082

    Last Modified: 16 Oct 2026

    Uncaught exception in Windows DNS allows an unauthorized attacker to deny service over a network.

    Published: 13 Oct 2026
    7.5
    High

    CVE-2026-70079

    Last Modified: 23 Oct 2026

    Improper enforcement of behavioral workflow in Windows DNS allows an unauthorized attacker to deny service over a network.

    Published: 13 Oct 2026
    4.7
    Medium

    CVE-2026-70077

    Last Modified: 28 Oct 2026

    Use after free in Windows Kernel allows an authorized attacker to disclose information locally.

    Published: 13 Oct 2026
    7
    High

    CVE-2026-70076

    Last Modified: 28 Oct 2026

    Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

    Published: 13 Oct 2026
    7.8
    High

    CVE-2026-70064

    Last Modified: 28 Oct 2026

    Integer underflow (wrap or wraparound) in Windows Kerberos allows an authorized attacker to elevate privileges locally.

    Published: 13 Oct 2026
    8.1
    High

    CVE-2026-70062

    Last Modified: 28 Oct 2026

    Double free in Windows Libarchive allows an unauthorized attacker to execute code over a network.

    Published: 13 Oct 2026
    4.7
    Medium

    CVE-2026-70063

    Last Modified: 28 Oct 2026

    Out-of-bounds read in Windows Kernel allows an authorized attacker to disclose information locally.

    Published: 13 Oct 2026
    7.8
    High

    CVE-2026-70060

    Last Modified: 28 Oct 2026

    Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

    Published: 13 Oct 2026
    7.8
    High

    CVE-2026-70059

    Last Modified: 28 Oct 2026

    Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally.

    Published: 13 Oct 2026
    7.5
    High

    CVE-2026-70058

    Last Modified: 28 Oct 2026

    Out-of-bounds write in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

    Published: 13 Oct 2026
    5.5
    Medium

    CVE-2026-70057

    Last Modified: 28 Oct 2026

    Incorrect authorization in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to bypass a security feature locally.

    Published: 13 Oct 2026
    7
    High

    CVE-2026-70056

    Last Modified: 28 Oct 2026

    Use after free in Windows Update Service allows an authorized attacker to elevate privileges locally.

    Published: 13 Oct 2026
    7.5
    High

    CVE-2026-70033

    Last Modified: 23 Oct 2026

    Missing release of memory after effective lifetime in Remote Desktop Gateway Service allows an unauthorized attacker to deny service over a network.

    Published: 13 Oct 2026
    7.8
    High

    CVE-2026-70027

    Last Modified: 23 Oct 2026

    Heap-based buffer overflow in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.

    Published: 13 Oct 2026
    7
    High

    CVE-2026-70026

    Last Modified: 18 Oct 2026

    Use after free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.

    Published: 13 Oct 2026
    5.3
    Medium

    CVE-2026-70025

    Last Modified: 25 Oct 2026

    Use after free in Windows Netlogon allows an authorized attacker to deny service over a network.

    Published: 13 Oct 2026
    7
    High

    CVE-2026-70021

    Last Modified: 25 Oct 2026

    Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.

    Published: 13 Oct 2026
    5.5
    Medium

    CVE-2026-70017

    Last Modified: 25 Oct 2026

    Access of resource using incompatible type ('type confusion') in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally.

    Published: 13 Oct 2026
    7.8
    High

    CVE-2026-70015

    Last Modified: 25 Oct 2026

    Use after free in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.

    Published: 13 Oct 2026
    7.5
    High

    CVE-2026-70014

    Last Modified: 23 Oct 2026

    Use after free in Windows Cryptographic Services allows an authorized attacker to execute code over a network.

    Published: 13 Oct 2026
    7.8
    High

    CVE-2026-70010

    Last Modified: 26 Oct 2026

    Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.

    Published: 13 Oct 2026
    5.5
    Medium

    CVE-2026-69979

    Last Modified: 26 Oct 2026

    Improper protection of alternate path in Windows AppX Deployment Service allows an authorized attacker to bypass a security feature locally.

    Published: 13 Oct 2026
    5.6
    Medium

    CVE-2026-69978

    Last Modified: 26 Oct 2026

    Null pointer dereference in Windows VMSwitch allows an authorized attacker to deny service locally.

    Published: 13 Oct 2026
    7.5
    High

    CVE-2026-69976

    Last Modified: 26 Oct 2026

    Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

    Published: 13 Oct 2026
    4.7
    Medium

    CVE-2026-69974

    Last Modified: 26 Oct 2026

    Out-of-bounds read in Desktop Window Manager allows an authorized attacker to disclose information locally.

    Published: 13 Oct 2026
    6.5
    Medium

    CVE-2026-69973

    Last Modified: 26 Oct 2026

    Improper limitation of a pathname to a restricted directory ('path traversal') in Windows Libarchive allows an unauthorized attacker to perform tampering over a network.

    Published: 13 Oct 2026
    5.5
    Medium

    CVE-2026-69971

    Last Modified: 26 Oct 2026

    Incorrect authorization in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.

    Published: 13 Oct 2026
    4.7
    Medium

    CVE-2026-69969

    Last Modified: 26 Oct 2026

    Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized attacker to disclose information locally.

    Published: 13 Oct 2026
    7
    High

    CVE-2026-69970

    Last Modified: 26 Oct 2026

    Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.

    Published: 13 Oct 2026
    6.5
    Medium

    CVE-2026-69968

    Last Modified: 26 Oct 2026

    Relative path traversal in Windows Libarchive allows an unauthorized attacker to perform tampering over a network.

    Published: 13 Oct 2026
    7
    High

    CVE-2026-69964

    Last Modified: 2 Nov 2026

    Use after free in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.

    Published: 13 Oct 2026
    7.8
    High

    CVE-2026-69966

    Last Modified: 29 Oct 2026

    Integer overflow or wraparound in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.

    Published: 13 Oct 2026
    5.5
    Medium

    CVE-2026-69967

    Last Modified: 29 Oct 2026

    Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to disclose information locally.

    Published: 13 Oct 2026
    7.8
    High

    CVE-2026-69963

    Last Modified: 2 Nov 2026

    Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.

    Published: 13 Oct 2026
    7.8
    High

    CVE-2026-69959

    Last Modified: 18 Oct 2026

    Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to execute code locally.

    Published: 13 Oct 2026
    6.8
    Medium

    CVE-2026-69958

    Last Modified: 18 Oct 2026

    Heap-based buffer overflow in Windows Overlay Filter allows an unauthorized attacker to execute code with a physical attack.

    Published: 13 Oct 2026
    7.8
    High

    CVE-2026-69957

    Last Modified: 25 Oct 2026

    Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

    Published: 13 Oct 2026
    5.5
    Medium

    CVE-2026-69954

    Last Modified: 17 Oct 2026

    Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally.

    Published: 13 Oct 2026
    7.8
    High

    CVE-2026-69953

    Last Modified: 18 Oct 2026

    Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

    Published: 13 Oct 2026
    7.8
    High

    CVE-2026-69952

    Last Modified: 23 Oct 2026

    Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

    Published: 13 Oct 2026
    6.8
    Medium

    CVE-2026-69947

    Last Modified: 16 Oct 2026

    Heap-based buffer overflow in Windows Overlay Filter allows an unauthorized attacker to execute code with a physical attack.

    Published: 13 Oct 2026
    7.8
    High

    CVE-2026-69950

    Last Modified: 23 Oct 2026

    Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

    Published: 13 Oct 2026
    8.8
    High

    CVE-2026-69945

    Last Modified: 25 Oct 2026

    Missing authorization in Windows AppX Deployment Extensions allows an authorized attacker to elevate privileges locally.

    Published: 13 Oct 2026
    7.8
    High

    CVE-2026-69942

    Last Modified: 23 Oct 2026

    Buffer over-read in Windows Overlay Filter allows an authorized attacker to execute code locally.

    Published: 13 Oct 2026
    8.8
    High

    CVE-2026-69918

    Last Modified: 16 Oct 2026

    Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges locally.

    Published: 13 Oct 2026
    8.1
    High

    CVE-2026-69913

    Last Modified: 23 Oct 2026

    Use after free in Windows TCP/IP allows an unauthorized attacker to execute code over a network.

    Published: 13 Oct 2026
    7.8
    High

    CVE-2026-69909

    Last Modified: 25 Oct 2026

    Heap-based buffer overflow in Microsoft COM for Windows allows an authorized attacker to elevate privileges locally.

    Published: 13 Oct 2026
    5.5
    Medium

    CVE-2026-69905

    Last Modified: 18 Oct 2026

    Missing authorization in Windows AppX Deployment Service allows an authorized attacker to perform tampering locally.

    Published: 13 Oct 2026
    7.8
    High

    CVE-2026-69926

    Last Modified: 25 Oct 2026

    Access of resource using incompatible type ('type confusion') in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

    Published: 13 Oct 2026
    7.8
    High

    CVE-2026-69850

    Last Modified: 26 Oct 2026

    Untrusted pointer dereference in Windows Certificates allows an authorized attacker to elevate privileges locally.

    Published: 13 Oct 2026