Recently updated CVEs

Oct 30, 2026 UTC

Improper access control in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.

Oct 30, 2026 UTC

Buffer over-read in Windows Common Log File System Driver allows an authorized attacker to disclose information locally.

Oct 30, 2026 UTC

Heap-based buffer overflow in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.

Oct 30, 2026 UTC

Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

Oct 30, 2026 UTC

Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute code over a network.

Oct 30, 2026 UTC

Heap-based buffer overflow in Windows IKE Extension allows an unauthorized attacker to deny service over a network.

Oct 30, 2026 UTC

Out-of-bounds read in Windows Portable Device MTP Driver allows an authorized attacker to disclose information locally.

Oct 30, 2026 UTC

Incorrect authorization in Windows Device Install Service allows an authorized attacker to elevate privileges locally.

Oct 30, 2026 UTC

Improper authorization in Windows Virtual Input allows an authorized attacker to elevate privileges locally.

Oct 30, 2026 UTC

Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.

Oct 30, 2026 UTC

Heap-based buffer overflow in Windows SMB Client allows an unauthorized attacker to elevate privileges over a network.

Oct 30, 2026 UTC

Buffer over-read in Windows RNDIS allows an unauthorized attacker to disclose information with a physical attack.

Oct 30, 2026 UTC

Generation of error message containing sensitive information in Windows NTFS allows an authorized attacker to disclose information locally.

Oct 30, 2026 UTC

Improper null termination in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.

Oct 30, 2026 UTC

Use after free in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.