Vulnerability intelligence / live index

Recently updated CVEs

A working index of published vulnerability records, ordered by latest update. Open a record to inspect its score, vector, and impact metrics.

Data source

CVE Program / CVE List®

Updated continuously

CVE-2026-50442

Nov 1, 2026 UTC

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally.

Inspect record →
CVSS5.5medium
CVE-2026-50473

Nov 1, 2026 UTC

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally.

Inspect record →
CVSS5.5medium
CVE-2026-50462

Nov 1, 2026 UTC

External control of file name or path in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

Inspect record →
CVSS7.8high
CVE-2026-50439

Nov 1, 2026 UTC

Use after free in Microsoft Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network.

Inspect record →
CVSS8.1high
CVE-2026-50465

Nov 1, 2026 UTC

Improper access control in Microsoft Windows DNS allows an authorized attacker to perform tampering locally.

Inspect record →
CVSS7.1high
CVE-2026-50441

Nov 1, 2026 UTC

Untrusted pointer dereference in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.

Inspect record →
CVSS7.8high
CVE-2026-50409

Nov 1, 2026 UTC

Exposure of sensitive information to an unauthorized actor in Windows Overlay Filter allows an authorized attacker to disclose information locally.

Inspect record →
CVSS5.5medium
CVE-2026-50435

Nov 1, 2026 UTC

Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

Inspect record →
CVSS7.8high
CVE-2026-50402

Nov 1, 2026 UTC

Incorrect conversion between numeric types in Windows NTFS allows an authorized attacker to elevate privileges locally.

Inspect record →
CVSS7.8high
CVE-2026-50466

Nov 1, 2026 UTC

Use after free in Windows Brokering File System allows an authorized attacker to elevate privileges locally.

Inspect record →
CVSS7.8high
CVE-2026-50455

Nov 1, 2026 UTC

Use of uninitialized resource in Universal Plug and Play (upnp.dll) allows an authorized attacker to disclose information locally.

Inspect record →
CVSS5.5medium
CVE-2026-50451

Nov 1, 2026 UTC

Missing authentication for critical function in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.

Inspect record →
CVSS7.1high
CVE-2026-50383

Nov 1, 2026 UTC

Buffer over-read in Windows Print Spooler Components allows an authorized attacker to disclose information locally.

Inspect record →
CVSS6.1medium
CVE-2026-50367

Nov 1, 2026 UTC

Incorrect access of indexable resource ('range error') in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally.

Inspect record →
CVSS7.8high