Recently updated CVEs

Oct 25, 2026 UTC

Authentication bypass by assumed-immutable data in Microsoft Identity Web allows an authorized attacker to elevate privileges over a network.

Oct 25, 2026 UTC

Origin validation error in Microsoft Authentication Library (MSAL) for Node.js allows an unauthorized attacker to disclose information over a network.

Oct 25, 2026 UTC

Improper resolution of path equivalence in Windows SmartScreen allows an unauthorized attacker to bypass a security feature over a network.

Oct 25, 2026 UTC

Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.

Oct 25, 2026 UTC

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

Oct 25, 2026 UTC

Improper link resolution before file access ('link following') in Windows Backup Engine allows an authorized attacker to elevate privileges locally.

Oct 25, 2026 UTC

Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.

Oct 25, 2026 UTC

Release of invalid pointer or reference in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.

Oct 25, 2026 UTC

Double free in Windows Kerberos allows an authorized attacker to elevate privileges locally.

Oct 25, 2026 UTC

No cwe for this issue in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.

Oct 25, 2026 UTC

Heap-based buffer overflow in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.

Oct 25, 2026 UTC

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

Oct 25, 2026 UTC

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

Oct 25, 2026 UTC

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

Oct 25, 2026 UTC

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.