CVE Database
10583 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-96249 | HIGH | 7.8 | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges… | — |
|
2026-10-13 |
| CVE-2026-96248 | HIGH | 7.5 | Stack-based buffer overflow in Windows Host Guardian Service allows an unauthorized attacker to deny… | — |
|
2026-10-13 |
| CVE-2026-96246 | HIGH | 7.5 | Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to disclose inform… | — |
|
2026-10-13 |
| CVE-2026-96245 | HIGH | 7.5 | Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attack… | — |
|
2026-10-13 |
| CVE-2026-96244 | HIGH | 7.8 | Use after free in Windows Internal System User Profile allows an authorized attacker to elevate priv… | — |
|
2026-10-13 |
| CVE-2026-96243 | HIGH | 7.8 | Improper link resolution before file access ('link following') in Windows WalletService allows an au… | — |
|
2026-10-13 |
| CVE-2026-96237 | HIGH | 7.5 | Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to … | — |
|
2026-10-13 |
| CVE-2026-96236 | HIGH | 7.5 | Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker… | — |
|
2026-10-13 |
| CVE-2026-96235 | HIGH | 8.8 | Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network. | — |
|
2026-10-13 |
| CVE-2026-96233 | HIGH | 7.5 | Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network. | — |
|
2026-10-13 |
| CVE-2026-96232 | HIGH | 7.5 | Out-of-bounds read in .NET allows an unauthorized attacker to disclose information over a network. | — |
|
2026-10-13 |
| CVE-2026-96231 | HIGH | 7.8 | Improper link resolution before file access ('link following') in .NET allows an authorized attacker… | — |
|
2026-10-13 |
| CVE-2026-96230 | HIGH | 8.8 | Improper neutralization of input during web page generation ('cross-site scripting') in ASP.NET Core… | — |
|
2026-10-13 |
| CVE-2026-96225 | HIGH | 7.8 | Improper link resolution before file access ('link following') in .NET allows an authorized attacker… | — |
|
2026-10-13 |
| CVE-2026-96224 | HIGH | 8.8 | Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network. |
T1190
T1203
|
|
2026-10-13 |
| CVE-2026-96223 | HIGH | 7.8 | Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally. | — |
|
2026-10-13 |
| CVE-2026-96222 | HIGH | 7.4 | Improper certificate validation in Active Directory Federation Services (AD FS) allows an unauthoriz… | — |
|
2026-10-13 |
| CVE-2026-96220 | HIGH | 7.8 | Improper control of generation of code ('code injection') in Windows Assigned Access allows an autho… | — |
|
2026-10-13 |
| CVE-2026-96217 | HIGH | 7.8 | Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges local… | — |
|
2026-10-13 |
| CVE-2026-96216 | HIGH | 7.0 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | — |
|
2026-10-13 |