CVE Database
10583 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-96215 | HIGH | 7.0 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windo… | — |
|
2026-10-13 |
| CVE-2026-96209 | HIGH | 7.0 | Out-of-bounds read in Windows Network File System allows an authorized attacker to elevate privilege… | — |
|
2026-10-13 |
| CVE-2026-96202 | HIGH | 8.8 | Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute… | — |
|
2026-10-13 |
| CVE-2026-96188 | HIGH | 7.3 | External control of system or configuration setting in Microsoft PowerToys allows an authorized atta… | — |
|
2026-10-13 |
| CVE-2026-96186 | HIGH | 7.8 | Deserialization of untrusted data in Microsoft Windows Media Foundation allows an authorized attacke… | — |
|
2026-10-13 |
| CVE-2026-96118 | HIGH | 7.8 | Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges lo… |
T1190
T1203
|
|
2026-10-13 |
| CVE-2026-96108 | HIGH | 7.8 | Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally… | — |
|
2026-10-13 |
| CVE-2026-96071 | HIGH | 7.5 | Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a n… | — |
|
2026-10-13 |
| CVE-2026-96044 | HIGH | 8.8 | No cwe for this issue in Microsoft Office SharePoint allows an authorized attacker to elevate privil… | — |
|
2026-10-13 |
| CVE-2026-95943 | HIGH | 7.0 | Double free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate … | — |
|
2026-10-13 |
| CVE-2026-95631 | HIGH | 8.7 | Adobe Commerce is affected by an Improper Input Validation vulnerability that could result in arbitr… | — |
|
2026-10-13 |
| CVE-2026-92922 | HIGH | 8.1 | Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused… | — |
|
2026-10-13 |
| CVE-2026-92911 | HIGH | 8.7 | Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused… | — |
|
2026-10-13 |
| CVE-2026-92910 | HIGH | 7.2 | Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Securi… | — |
|
2026-10-13 |
| CVE-2026-92908 | HIGH | 8.3 | Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Securi… | — |
|
2026-10-13 |
| CVE-2026-88219 | HIGH | 8.8 | Untrusted pointer dereference in RPC Runtime allows an unauthorized attacker to execute code over a … | — |
|
2026-10-13 |
| CVE-2026-88210 | HIGH | 7.8 | Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized … | — |
|
2026-10-13 |
| CVE-2026-88207 | HIGH | 7.5 | Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute… | — |
|
2026-10-13 |
| CVE-2026-88206 | HIGH | 7.5 | Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to e… | — |
|
2026-10-13 |
| CVE-2026-88204 | HIGH | 7.3 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of… | — |
|
2026-10-13 |