Recently updated CVEs

Oct 29, 2026 UTC

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

Oct 29, 2026 UTC

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

Oct 29, 2026 UTC

Out-of-bounds read in Windows Remote Access Service Infrastructure allows an authorized attacker to disclose information locally.

Oct 29, 2026 UTC

Improper access control in Windows Host Guardian Service allows an authorized attacker to perform tampering locally.

Oct 29, 2026 UTC

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

Oct 29, 2026 UTC

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

Oct 29, 2026 UTC

Improper verification of source of a communication channel in Windows Hyper-V allows an unauthorized attacker to bypass a security feature over an adjacent network.

Oct 29, 2026 UTC

Null pointer dereference in Windows Installer allows an authorized attacker to elevate privileges locally.

Oct 29, 2026 UTC

Heap-based buffer overflow in Winlogon allows an authorized attacker to elevate privileges locally.

Oct 29, 2026 UTC

Time-of-check time-of-use (toctou) race condition in Reliable Multicast Transport Driver (RMCAST) allows an authorized attacker to elevate privileges locally.

Oct 29, 2026 UTC

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally.

Oct 29, 2026 UTC

IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a restricted directory.

Oct 29, 2026 UTC

Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to elevate privileges locally.

Oct 29, 2026 UTC

Use after free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally.

Oct 29, 2026 UTC

Heap-based buffer overflow in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over an adjacent network.