Recently updated CVEs

Oct 28, 2026 UTC

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

Oct 28, 2026 UTC

Uncaught exception in .NET allows an authorized attacker to elevate privileges locally.

Oct 28, 2026 UTC

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code locally.

Oct 28, 2026 UTC

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Backup Engine allows an authorized attacker to elevate privileges locally.

Oct 28, 2026 UTC

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Server Network driver allows an unauthorized attacker to execute code over a network.

Oct 28, 2026 UTC

Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to disclose information over a network.

Oct 28, 2026 UTC

Out-of-bounds read in Windows Schannel allows an authorized attacker to disclose information over a network.

Oct 28, 2026 UTC

Unchecked input for loop condition in .NET allows an unauthorized attacker to deny service over a network.

Oct 28, 2026 UTC

Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.

Oct 28, 2026 UTC

Improper removal of sensitive information before storage or transfer in .NET allows an unauthorized attacker to disclose information over a network.

Oct 28, 2026 UTC

Exposure of sensitive information to an unauthorized actor in Windows Win32K allows an authorized attacker to disclose information locally.

Oct 28, 2026 UTC

Inconsistent interpretation of http requests ('http request/response smuggling') in .NET allows an unauthorized attacker to bypass a security feature over a network.

Oct 28, 2026 UTC

Use of uninitialized resource in Windows RDP allows an unauthorized attacker to execute code over a network.

Oct 28, 2026 UTC

Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to execute code locally.

Oct 28, 2026 UTC

Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.