Recently updated CVEs

Nov 1, 2026 UTC

Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

Nov 1, 2026 UTC

Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.

Nov 1, 2026 UTC

Allocation of resources without limits or throttling in HTTP/2 allows an unauthorized attacker to deny service over a network.

Nov 1, 2026 UTC

Allocation of resources without limits or throttling in Windows HTTP.sys allows an unauthorized attacker to deny service over a network.

Nov 1, 2026 UTC

Improperly implemented security check for standard in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.

Nov 1, 2026 UTC

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Clipboard Server allows an authorized attacker to elevate privileges locally.

Nov 1, 2026 UTC

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.

Nov 1, 2026 UTC

Integer underflow (wrap or wraparound) in Windows DHCP Client allows an unauthorized attacker to elevate privileges over a network.

Nov 1, 2026 UTC

Improper link resolution before file access ('link following') in Universal Plug and Play (upnp.dll) allows an authorized attacker to disclose information locally.

Nov 1, 2026 UTC

Heap-based buffer overflow in Active Directory Domain Services allows an authorized attacker to execute code over a network.

Nov 1, 2026 UTC

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.

Nov 1, 2026 UTC

Insufficient granularity of access control in Microsoft Surface allows an authorized attacker to elevate privileges locally.

Nov 1, 2026 UTC

Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over a network.

Nov 1, 2026 UTC

Improper certificate validation in Azure Connected Machine Agent allows an unauthorized attacker to elevate privileges over an adjacent network.

Nov 1, 2026 UTC

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges locally.