WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Product server✕
Overview 26,247 matches · 1,776 in Waratek scope · 301 protected · 793 exploited · 459 CISA KEV · 2,585 public PoC · 868 EPSS ≥ 0.5
26,247matches 1,776in Waratek scope6.8% 301protected1.1% 793exploited3.0% 459CISA KEV1.7% 2,585public PoC9.8% 868EPSS ≥ 0.53.3%
Protected by Waratek 306 1.2% Rule in development 3 0.0% Mitigation candidate 65 0.2% No exploit published 1,402 5.3% Outside Waratek scope 1,158 4.4% Not applicable 23,313 88.8% Withdrawn CVE 0 0.0%
Critical 1,857 7.1% High 13,167 50.2% Medium 10,342 39.4% Low 881 3.4% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 301 1.1% partly blocked 5 0.0% not blocked 25,940 98.8% not established 1 0.0% unrecorded 0 0.0%
Exploited 793 3.0% Working exploit published 1,882 7.2% Proof of concept only 713 2.7% Forecast only 182 0.7% No public exploit 22,677 86.4%
split by peak 4,585 / year
Not applicable: 23,313Outside Waratek scope: 1,158No exploit published: 1,402Mitigation candidate: 65Rule in development: 3Protected by Waratek: 306 Low: 881Medium: 10,342High: 13,167Critical: 1,857 not established: 1not blocked: 25,940partly blocked: 5blocked by ARMR today: 301 No public exploit: 22,677Forecast only: 182Proof of concept only: 713Working exploit published: 1,882Exploited: 793
19931 Not applicable1 High1 not blocked1 No public exploit1 19944 Not applicable4 High4 not blocked4 No public exploit4 19951 Not applicable1 High1 not blocked1 Working exploit published1 199613 Not applicable13 Critical1 High5 Medium6 Low1 not blocked13 Working exploit published5 Forecast only1 No public exploit7 199719 Not applicable19 High10 Medium9 not blocked19 Working exploit published6 No public exploit13 199830 Not applicable30 High14 Medium15 Low1 not blocked30 Working exploit published11 No public exploit19 1999126 No exploit published1 Outside Waratek scope1 Not applicable124 High51 Medium69 Low6 not blocked126 Working exploit published50 No public exploit76 2000152 Mitigation candidate4 No exploit published5 Outside Waratek scope2 Not applicable141 High60 Medium85 Low7 not blocked152 Exploited2 Working exploit published70 Forecast only1 No public exploit79 2001275 Protected by Waratek1 Mitigation candidate1 No exploit published5 Outside Waratek scope12 Not applicable256 Critical2 High102 Medium149 Low22 blocked by ARMR today1 not blocked274 Exploited4 Working exploit published77 Forecast only2 No public exploit192 2002325 Protected by Waratek1 Mitigation candidate2 No exploit published17 Outside Waratek scope10 Not applicable295 Critical2 High151 Medium164 Low8 blocked by ARMR today1 not blocked324 Exploited4 Working exploit published97 Forecast only7 No public exploit217 2003220 Mitigation candidate1 No exploit published18 Outside Waratek scope6 Not applicable195 Critical2 High78 Medium123 Low17 not blocked220 Exploited5 Working exploit published62 No public exploit153 2004381 Protected by Waratek1 Mitigation candidate1 No exploit published20 Outside Waratek scope6 Not applicable353 Critical2 High141 Medium208 Low30 blocked by ARMR today1 not blocked380 Exploited8 Working exploit published121 No public exploit252 2005487 Mitigation candidate2 No exploit published46 Outside Waratek scope14 Not applicable425 Critical2 High211 Medium227 Low47 not blocked487 Exploited8 Working exploit published115 Forecast only4 No public exploit360 2006521 Protected by Waratek2 Mitigation candidate1 No exploit published75 Outside Waratek scope64 Not applicable379 High250 Medium230 Low41 blocked by ARMR today2 not blocked519 Exploited2 Working exploit published115 Proof of concept only1 Forecast only4 No public exploit399 2007530 Protected by Waratek1 Mitigation candidate1 No exploit published72 Outside Waratek scope60 Not applicable396 Critical2 High264 Medium247 Low17 blocked by ARMR today1 not blocked529 Exploited8 Working exploit published109 Forecast only2 No public exploit411 2008486 Mitigation candidate2 No exploit published46 Outside Waratek scope31 Not applicable407 Critical4 High239 Medium220 Low23 not blocked486 Exploited4 Working exploit published87 Proof of concept only2 Forecast only5 No public exploit388 2009525 Protected by Waratek2 Mitigation candidate2 No exploit published61 Outside Waratek scope33 Not applicable427 Critical6 High240 Medium248 Low31 blocked by ARMR today2 not blocked523 Exploited31 Working exploit published78 Forecast only1 No public exploit415 2010547 Protected by Waratek2 Mitigation candidate1 No exploit published32 Outside Waratek scope33 Not applicable479 Critical5 High209 Medium286 Low47 blocked by ARMR today2 not blocked545 Exploited13 Working exploit published92 Forecast only6 No public exploit436 2011448 Protected by Waratek1 Mitigation candidate2 No exploit published30 Outside Waratek scope54 Not applicable361 Critical3 High176 Medium234 Low35 blocked by ARMR today1 not blocked447 Exploited11 Working exploit published48 Proof of concept only1 Forecast only3 No public exploit385 2012427 Protected by Waratek2 Mitigation candidate2 No exploit published30 Outside Waratek scope30 Not applicable363 Critical7 High158 Medium228 Low34 blocked by ARMR today2 not blocked425 Exploited16 Working exploit published39 Proof of concept only4 Forecast only1 No public exploit367 2013481 Protected by Waratek4 No exploit published26 Outside Waratek scope28 Not applicable423 Critical8 High214 Medium219 Low40 blocked by ARMR today4 not blocked477 Exploited20 Working exploit published35 Proof of concept only1 Forecast only8 No public exploit417 2014613 Protected by Waratek2 Mitigation candidate4 No exploit published29 Outside Waratek scope77 Not applicable501 Critical13 High172 Medium359 Low69 blocked by ARMR today2 not blocked611 Exploited27 Working exploit published33 Proof of concept only1 Forecast only4 No public exploit548 2015684 Protected by Waratek1 Mitigation candidate1 No exploit published22 Outside Waratek scope68 Not applicable592 Critical15 High275 Medium324 Low70 blocked by ARMR today1 not blocked683 Exploited29 Working exploit published73 Proof of concept only2 Forecast only5 No public exploit575 2016711 Protected by Waratek6 Mitigation candidate2 No exploit published49 Outside Waratek scope33 Not applicable621 Critical71 High372 Medium235 Low33 blocked by ARMR today6 not blocked705 Exploited33 Working exploit published86 Proof of concept only3 Forecast only14 No public exploit575 20171,055 Protected by Waratek30 Mitigation candidate3 No exploit published58 Outside Waratek scope75 Not applicable889 Critical134 High428 Medium468 Low25 blocked by ARMR today28 partly blocked2 not blocked1,025 Exploited40 Working exploit published159 Proof of concept only4 Forecast only4 No public exploit848 20181,511 Protected by Waratek50 No exploit published71 Outside Waratek scope103 Not applicable1,287 Critical239 High644 Medium606 Low22 blocked by ARMR today49 partly blocked1 not blocked1,461 Exploited50 Working exploit published100 Proof of concept only10 Forecast only7 No public exploit1,344 20191,560 Protected by Waratek38 Mitigation candidate1 No exploit published68 Outside Waratek scope188 Not applicable1,265 Critical164 High675 Medium689 Low32 blocked by ARMR today37 partly blocked1 not blocked1,522 Exploited68 Working exploit published82 Proof of concept only24 Forecast only18 No public exploit1,368 20201,900 Protected by Waratek42 Mitigation candidate8 No exploit published95 Outside Waratek scope80 Not applicable1,675 Critical141 High1,037 Medium693 Low29 blocked by ARMR today42 not blocked1,858 Exploited61 Working exploit published27 Proof of concept only25 Forecast only12 No public exploit1,775 20211,399 Protected by Waratek37 Mitigation candidate4 No exploit published86 Outside Waratek scope46 Not applicable1,226 Critical150 High757 Medium473 Low19 blocked by ARMR today37 not blocked1,362 Exploited81 Working exploit published21 Proof of concept only34 Forecast only22 No public exploit1,241 20221,415 Protected by Waratek22 Rule in development1 Mitigation candidate1 No exploit published61 Outside Waratek scope48 Not applicable1,282 Critical162 High786 Medium452 Low15 blocked by ARMR today22 not blocked1,393 Exploited51 Working exploit published15 Proof of concept only75 Forecast only19 No public exploit1,255 20231,476 Protected by Waratek12 Mitigation candidate6 No exploit published55 Outside Waratek scope31 Not applicable1,372 Critical154 High828 Medium472 Low22 blocked by ARMR today12 not blocked1,463 not established1 Exploited61 Working exploit published13 Proof of concept only95 Forecast only22 No public exploit1,285 20241,464 Protected by Waratek16 Mitigation candidate4 No exploit published67 Outside Waratek scope15 Not applicable1,362 Critical111 High845 Medium483 Low25 blocked by ARMR today15 partly blocked1 not blocked1,448 Exploited51 Working exploit published18 Proof of concept only85 Forecast only9 No public exploit1,301 20251,875 Protected by Waratek11 Rule in development2 Mitigation candidate7 No exploit published69 Outside Waratek scope5 Not applicable1,781 Critical123 High955 Medium755 Low42 blocked by ARMR today11 not blocked1,864 Exploited55 Working exploit published22 Proof of concept only194 Forecast only1 No public exploit1,603 20264,585 Protected by Waratek22 Mitigation candidate2 No exploit published188 Outside Waratek scope5 Not applicable4,368 Critical334 High2,814 Medium1,366 Low71 blocked by ARMR today22 not blocked4,563 Exploited50 Working exploit published15 Proof of concept only152 No public exploit4,368
199319961999200220052008201120142017202020232026
26,247 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed. ‹ prev page 3 of 263 next ›
CVE Severity Published▾ Status Exploitation Description
CVE-2026-96944 Medium 2026-10-13 Not applicable No public exploit Insertion of sensitive information into externally-accessible file or directory in Windows Storage allows an authorized attacker to disclose information locally.
CVE-2026-96939 High 2026-10-13 Not applicable No public exploit Time-of-check time-of-use (toctou) race condition in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.
CVE-2026-96938 Medium 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to elevate privileges locally.
CVE-2026-96937 High 2026-10-13 Not applicable No public exploit Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
CVE-2026-96935 Medium 2026-10-13 Not applicable No public exploit Exposure of sensitive system information to an unauthorized control sphere in Windows NTFS allows an authorized attacker to disclose information locally.
CVE-2026-96934 Critical 2026-10-13 Not applicable No public exploit Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
CVE-2026-96933 High 2026-10-13 Not applicable No public exploit Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.
CVE-2026-96932 High 2026-10-13 Not applicable No public exploit Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Embedded Mode Service allows an authorized attacker to elevate privileges locally.
CVE-2026-96931 High 2026-10-13 Not applicable No public exploit Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVE-2026-96930 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally.
CVE-2026-96929 High 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-96928 High 2026-10-13 Not applicable No public exploit Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVE-2026-96927 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.
CVE-2026-96926 Medium 2026-10-13 Not applicable No public exploit Missing authorization in DNS Server allows an authorized attacker to perform tampering locally.
CVE-2026-96925 Medium 2026-10-13 Not applicable No public exploit Integer underflow (wrap or wraparound) in Windows NTFS allows an authorized attacker to disclose information locally.
CVE-2026-96924 Critical 2026-10-13 Not applicable No public exploit Untrusted pointer dereference in Windows OLE allows an unauthorized attacker to execute code over a network.
CVE-2026-96923 High 2026-10-13 Not applicable No public exploit Use after free in Windows Workstation Service allows an authorized attacker to elevate privileges locally.
CVE-2026-96921 Medium 2026-10-13 Not applicable No public exploit Access of resource using incompatible type ('type confusion') in Windows Message Queuing Queue Manager allows an authorized attacker to disclose information locally.
CVE-2026-96920 High 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
CVE-2026-96919 High 2026-10-13 Not applicable No public exploit Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
CVE-2026-96918 High 2026-10-13 Not applicable No public exploit Improper access control in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVE-2026-96917 High 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Windows PCI Bus Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-96916 High 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVE-2026-96915 High 2026-10-13 Not applicable No public exploit Integer overflow or wraparound in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.
CVE-2026-96914 High 2026-10-13 Not applicable No public exploit Integer overflow or wraparound in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.
CVE-2026-96913 High 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-96912 High 2026-10-13 Not applicable No public exploit Use after free in Windows Client License Service allows an authorized attacker to elevate privileges locally.
CVE-2026-96911 High 2026-10-13 Not applicable No public exploit Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
CVE-2026-96910 Medium 2026-10-13 Not applicable No public exploit Untrusted pointer dereference in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.
CVE-2026-96909 Critical 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Windows BitLocker allows an unauthorized attacker to execute code over a network.
CVE-2026-96868 High 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-96867 High 2026-10-13 Not applicable No public exploit Out-of-bounds read in Windows NTFS allows an authorized attacker to execute code locally.
CVE-2026-96866 High 2026-10-13 Not applicable No public exploit Out-of-bounds read in Network Device Enrollment Service (NDES) allows an unauthorized attacker to deny service over a network.
CVE-2026-96865 Medium 2026-10-13 Not applicable No public exploit Exposure of sensitive system information to an unauthorized control sphere in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally.
CVE-2026-96864 Critical 2026-10-13 Not applicable No public exploit Double free in Microsoft Failover Cluster Virtual Driver allows an unauthorized attacker to execute code over a network.
CVE-2026-96863 Medium 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Windows Storage Port Driver allows an unauthorized attacker to elevate privileges with a physical attack.
CVE-2026-96862 High 2026-10-13 Not applicable No public exploit Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.
CVE-2026-96861 High 2026-10-13 Not applicable No public exploit Out-of-bounds read in Network Device Enrollment Service (NDES) allows an unauthorized attacker to deny service over a network.
CVE-2026-96860 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in Windows USB Print Driver allows an authorized attacker to disclose information locally.
CVE-2026-96859 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in Windows Imaging Component allows an authorized attacker to disclose information locally.
CVE-2026-96858 Medium 2026-10-13 Not applicable No public exploit Missing authentication for critical function in Windows Security Account Manager allows an authorized attacker to perform tampering locally.
CVE-2026-96857 Medium 2026-10-13 Not applicable No public exploit Files or directories accessible to external parties in Windows Projected File System allows an authorized attacker to disclose information locally.
CVE-2026-96856 High 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.
CVE-2026-96855 Medium 2026-10-13 Not applicable No public exploit Improper access control in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally.
CVE-2026-96854 Medium 2026-10-13 Not applicable No public exploit Access of resource using incompatible type ('type confusion') in Windows Device Association Service allows an authorized attacker to disclose information locally.
CVE-2026-96853 Medium 2026-10-13 Not applicable No public exploit Time-of-check time-of-use (toctou) race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
CVE-2026-96852 High 2026-10-13 Not applicable No public exploit Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
CVE-2026-96851 Medium 2026-10-13 Not applicable No public exploit Buffer over-read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.
CVE-2026-96850 Medium 2026-10-13 Not applicable No public exploit Use of uninitialized resource in Windows Modern Device Management (MDM) allows an authorized attacker to disclose information locally.
CVE-2026-96848 Medium 2026-10-13 Not applicable No public exploit Buffer over-read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
CVE-2026-96847 High 2026-10-13 Not applicable No public exploit Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally.
CVE-2026-96846 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in WebDAV allows an authorized attacker to disclose information locally.
CVE-2026-96844 High 2026-10-13 Not applicable No public exploit Integer underflow (wrap or wraparound) in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges over an adjacent network.
CVE-2026-96843 High 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.
CVE-2026-96325 High 2026-10-13 Not applicable No public exploit Missing reference to active allocated resource in Windows SMB Server allows an unauthorized attacker to deny service over a network.
CVE-2026-96324 High 2026-10-13 Not applicable No public exploit Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
CVE-2026-96323 High 2026-10-13 Not applicable No public exploit Use after free in Windows Update allows an authorized attacker to elevate privileges locally.
CVE-2026-96322 High 2026-10-13 Not applicable No public exploit Use after free in Windows Remote Desktop Protocol allows an authorized attacker to elevate privileges locally.
CVE-2026-96321 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in Remote Desktop Display Driver allows an authorized attacker to disclose information locally.
CVE-2026-96320 Critical 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
CVE-2026-96319 High 2026-10-13 Not applicable No public exploit Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-96318 High 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Windows Resume allows an authorized attacker to elevate privileges locally.
CVE-2026-96317 High 2026-10-13 Not applicable No public exploit Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-96316 Medium 2026-10-13 Not applicable No public exploit Improper access control in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to perform tampering locally.
CVE-2026-96315 Medium 2026-10-13 Not applicable No public exploit Missing authorization in Windows Overlay Filter allows an authorized attacker to perform tampering locally.
CVE-2026-96314 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in Windows Audio Service allows an authorized attacker to disclose information locally.
CVE-2026-96313 High 2026-10-13 Not applicable No public exploit Missing authentication for critical function in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
CVE-2026-96312 High 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-96311 Medium 2026-10-13 Not applicable No public exploit Improper authorization in Windows Network List Service allows an authorized attacker to perform tampering locally.
CVE-2026-96310 High 2026-10-13 Not applicable No public exploit Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-96309 High 2026-10-13 Not applicable No public exploit Use after free in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.
CVE-2026-96308 High 2026-10-13 Not applicable No public exploit Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-96307 High 2026-10-13 Not applicable No public exploit Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-96306 High 2026-10-13 Not applicable No public exploit Out-of-bounds read in Windows Sysmain Service allows an authorized attacker to elevate privileges locally.
CVE-2026-96305 High 2026-10-13 Not applicable No public exploit Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-96304 High 2026-10-13 Not applicable No public exploit Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-96302 High 2026-10-13 Not applicable No public exploit Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-96301 High 2026-10-13 Not applicable No public exploit Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-96300 Medium 2026-10-13 Not applicable No public exploit Uncontrolled resource consumption in RPC Endpoint Mapper Service allows an unauthorized attacker to deny service over a network.
CVE-2026-96254 High 2026-10-13 Not applicable No public exploit Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-96253 High 2026-10-13 Not applicable No public exploit Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-96252 Critical 2026-10-13 Not applicable No public exploit Improper verification of cryptographic signature in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-96250 High 2026-10-13 Not applicable No public exploit Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-96249 High 2026-10-13 Not applicable No public exploit Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
CVE-2026-96248 High 2026-10-13 Not applicable No public exploit Stack-based buffer overflow in Windows Host Guardian Service allows an unauthorized attacker to deny service over a network.
CVE-2026-96247 Medium 2026-10-13 Not applicable No public exploit Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.
CVE-2026-96246 High 2026-10-13 Not applicable No public exploit Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to disclose information over a network.
CVE-2026-96245 High 2026-10-13 Not applicable No public exploit Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
CVE-2026-96244 High 2026-10-13 Not applicable No public exploit Use after free in Windows Internal System User Profile allows an authorized attacker to elevate privileges locally.
CVE-2026-96243 High 2026-10-13 Not applicable No public exploit Improper link resolution before file access ('link following') in Windows WalletService allows an authorized attacker to elevate privileges locally.
CVE-2026-96223 High 2026-10-13 Not applicable No public exploit Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
CVE-2026-96222 High 2026-10-13 Not applicable No public exploit Improper certificate validation in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-96220 High 2026-10-13 Not applicable No public exploit Improper control of generation of code ('code injection') in Windows Assigned Access allows an authorized attacker to elevate privileges locally.
CVE-2026-96219 Critical 2026-10-13 Not applicable No public exploit Out-of-bounds write in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to execute code over a network.
CVE-2026-96218 Medium 2026-10-13 Not applicable No public exploit Improper access control in Windows Update Stack allows an authorized attacker to perform tampering locally.
CVE-2026-96217 High 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVE-2026-96216 High 2026-10-13 Not applicable No public exploit Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-96209 High 2026-10-13 Not applicable No public exploit Out-of-bounds read in Windows Network File System allows an authorized attacker to elevate privileges locally.
CVE-2026-96186 High 2026-10-13 Not applicable No public exploit Deserialization of untrusted data in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally.
CVE-2026-96118 High 2026-10-13 Not applicable No public exploit Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
‹ prev page 3 of 263 next ›