CVE Database
10583 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-85945 | HIGH | 7.8 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | — |
|
2026-10-13 |
| CVE-2026-85943 | HIGH | 7.0 | Time-of-check time-of-use (toctou) race condition in Reliable Multicast Transport Driver (RMCAST) al… | — |
|
2026-10-13 |
| CVE-2026-85941 | HIGH | 7.0 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windo… | — |
|
2026-10-13 |
| CVE-2026-85936 | HIGH | 8.8 | Double free in Windows Shell allows an unauthorized attacker to execute code over a network. | — |
|
2026-10-13 |
| CVE-2026-85934 | HIGH | 7.0 | Use after free in Windows AppX Deployment Service allows an authorized attacker to elevate privilege… | — |
|
2026-10-13 |
| CVE-2026-85933 | HIGH | 7.8 | Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileg… | — |
|
2026-10-13 |
| CVE-2026-85931 | HIGH | 8.8 | Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to… | — |
|
2026-10-13 |
| CVE-2026-85930 | HIGH | 7.0 | Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges loca… | — |
|
2026-10-13 |
| CVE-2026-85927 | HIGH | 7.8 | Heap-based buffer overflow in Windows Universal Plug and Play (UPnP) Device Host allows an authorize… | — |
|
2026-10-13 |
| CVE-2026-85926 | HIGH | 8.1 | Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to… | — |
|
2026-10-13 |
| CVE-2026-85925 | HIGH | 8.2 | Improper restriction of communication channel to intended endpoints in Azure Key Vault allows an aut… | — |
|
2026-10-13 |
| CVE-2026-85922 | HIGH | 7.4 | Weak authentication in Azure Key Vault allows an unauthorized attacker to bypass a security feature … | — |
|
2026-10-13 |
| CVE-2026-85920 | HIGH | 7.0 | Time-of-check time-of-use (toctou) race condition in Windows BitLocker allows an authorized attacker… | — |
|
2026-10-13 |
| CVE-2026-85918 | HIGH | 7.0 | Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker t… | — |
|
2026-10-13 |
| CVE-2026-85915 | HIGH | 7.8 | Heap-based buffer overflow in Windows PCI Bus Driver allows an authorized attacker to elevate privil… | — |
|
2026-10-13 |
| CVE-2026-85914 | HIGH | 7.0 | Use after free in Windows Embedded Mode Service allows an authorized attacker to elevate privileges … | — |
|
2026-10-13 |
| CVE-2026-85912 | HIGH | 7.0 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windo… | — |
|
2026-10-13 |
| CVE-2026-85911 | HIGH | 7.8 | Use after free in Windows StateRepository API allows an authorized attacker to elevate privileges lo… | — |
|
2026-10-13 |
| CVE-2026-85908 | HIGH | 7.8 | Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privile… | — |
|
2026-10-13 |
| CVE-2026-85906 | HIGH | 7.8 | Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges loc… | — |
|
2026-10-13 |