Recently updated CVEs

Oct 30, 2026 UTC

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.

Oct 30, 2026 UTC

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.

Oct 30, 2026 UTC

Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine

Oct 30, 2026 UTC

Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network.

Oct 30, 2026 UTC

Use after free in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.

Oct 30, 2026 UTC

Out-of-bounds read in Windows Storage Spaces Controller allows an authorized attacker to disclose information locally.

Oct 30, 2026 UTC

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Oct 30, 2026 UTC

Heap-based buffer overflow in Windows Online Certificate Status Protocol (OCSP) allows an authorized attacker to elevate privileges locally.

Oct 30, 2026 UTC

Use after free in Windows Work Folder Service allows an authorized attacker to elevate privileges locally.

Oct 30, 2026 UTC

Origin validation error in Microsoft Teams for Android allows an authorized attacker to disclose information over a network.

Oct 30, 2026 UTC

Stack-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

Oct 30, 2026 UTC

Integer overflow or wraparound in Windows Imaging Component allows an unauthorized attacker to execute code over a network.

Oct 30, 2026 UTC

Out-of-bounds read in Windows USB Mass Storage Class Driver allows an unauthorized attacker to elevate privileges with a physical attack.

Oct 30, 2026 UTC

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Oct 30, 2026 UTC

Heap-based buffer overflow in Windows VOLSNAP.SYS allows an authorized attacker to execute code locally.