Recently updated CVEs

Oct 31, 2026 UTC

Out-of-bounds read in Windows Portable Device MTP Driver allows an authorized attacker to disclose information locally.

Oct 31, 2026 UTC

Incorrect authorization in Windows Device Install Service allows an authorized attacker to elevate privileges locally.

Oct 31, 2026 UTC

Improper authorization in Windows Virtual Input allows an authorized attacker to elevate privileges locally.

Oct 31, 2026 UTC

Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.

Oct 31, 2026 UTC

Heap-based buffer overflow in Windows SMB Client allows an unauthorized attacker to elevate privileges over a network.

Oct 31, 2026 UTC

Buffer over-read in Windows RNDIS allows an unauthorized attacker to disclose information with a physical attack.

Oct 31, 2026 UTC

Generation of error message containing sensitive information in Windows NTFS allows an authorized attacker to disclose information locally.

Oct 31, 2026 UTC

Improper null termination in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.

Oct 31, 2026 UTC

Use after free in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.

Oct 31, 2026 UTC

Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.

Oct 31, 2026 UTC

Heap-based buffer overflow in Windows Bluetooth Service allows an unauthorized attacker to elevate privileges over an adjacent network.

Oct 31, 2026 UTC

Heap-based buffer overflow in Microsoft Internet Messaging API allows an unauthorized attacker to execute code over a network.

Oct 31, 2026 UTC

Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

Oct 31, 2026 UTC

Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service Module allows an authorized attacker to disclose information locally.

Oct 31, 2026 UTC

Use after free in Windows Camera Frame Server Monitor allows an unauthorized attacker to elevate privileges over an adjacent network.