CVE Database
10583 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-85356 | HIGH | 7.8 | Out-of-bounds read in Windows Volume Manager Extension Driver allows an authorized attacker to eleva… | — |
|
2026-10-13 |
| CVE-2026-85355 | HIGH | 7.0 | Inclusion of functionality from untrusted control sphere in Windows Common Log File System Driver al… | — |
|
2026-10-13 |
| CVE-2026-85354 | HIGH | 7.0 | Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locall… | — |
|
2026-10-13 |
| CVE-2026-85353 | HIGH | 7.5 | Out-of-bounds read in Windows Print Spooler Components allows an unauthorized attacker to disclose i… | — |
|
2026-10-13 |
| CVE-2026-85352 | HIGH | 7.0 | Use after free in Windows Device Association Service allows an authorized attacker to elevate privil… | — |
|
2026-10-13 |
| CVE-2026-85343 | HIGH | 7.8 | Improper link resolution before file access ('link following') in Windows Hyper-V allows an authoriz… | — |
|
2026-10-13 |
| CVE-2026-85342 | HIGH | 7.0 | Use after free in Windows Device Association Service allows an authorized attacker to elevate privil… | — |
|
2026-10-13 |
| CVE-2026-85341 | HIGH | 7.8 | Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate priv… | — |
|
2026-10-13 |
| CVE-2026-85340 | HIGH | 7.8 | Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges … | — |
|
2026-10-13 |
| CVE-2026-85339 | HIGH | 8.8 | Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an… | — |
|
2026-10-13 |
| CVE-2026-85338 | HIGH | 7.8 | Out-of-bounds read in Microsoft Graphics Component allows an authorized attacker to elevate privileg… | — |
|
2026-10-13 |
| CVE-2026-85334 | HIGH | 7.5 | Out-of-bounds read in Windows Message Queuing Queue Manager allows an unauthorized attacker to discl… | — |
|
2026-10-13 |
| CVE-2026-85332 | HIGH | 7.8 | Use after free in Windows Device Association Service allows an authorized attacker to elevate privil… | — |
|
2026-10-13 |
| CVE-2026-85329 | HIGH | 7.0 | Concurrent execution using shared resource with improper synchronization ('race condition') in Micro… | — |
|
2026-10-13 |
| CVE-2026-85328 | HIGH | 7.0 | Weak authentication in Windows Projected File System allows an authorized attacker to elevate privil… | — |
|
2026-10-13 |
| CVE-2026-85327 | HIGH | 7.8 | Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elev… | — |
|
2026-10-13 |
| CVE-2026-85324 | HIGH | 7.5 | Memory allocation with excessive size value in Active Directory Federation Services (AD FS) allows a… | — |
|
2026-10-13 |
| CVE-2026-85322 | HIGH | 7.5 | Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an unauthor… | — |
|
2026-10-13 |
| CVE-2026-85321 | HIGH | 7.5 | Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS)… | — |
|
2026-10-13 |
| CVE-2026-85319 | HIGH | 7.5 | Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS)… | — |
|
2026-10-13 |