Vulnerability intelligence / live index

Recently updated CVEs

A working index of published vulnerability records, ordered by latest update. Open a record to inspect its score, vector, and impact metrics.

Data source

CVE Program / CVE List®

Updated continuously

CVE-2026-49808

Nov 1, 2026 UTC

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileges locally.

Inspect record →
CVSS7.8high
CVE-2026-50298

Nov 1, 2026 UTC

Integer overflow or wraparound in Windows Spaceport.sys allows an unauthorized attacker to elevate privileges with a physical attack.

Inspect record →
CVSS6.8medium
CVE-2026-50342

Nov 1, 2026 UTC

Improper access control in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.

Inspect record →
CVSS8.8high
CVE-2026-49807

Nov 1, 2026 UTC

Exposure of sensitive information to an unauthorized actor in Windows DirectX allows an unauthorized attacker to disclose information locally.

Inspect record →
CVSS6.2medium
CVE-2026-50351

Nov 1, 2026 UTC

Improper access control in Windows Audio Compression Manager (ACM) allows an authorized attacker to elevate privileges locally.

Inspect record →
CVSS7.8high
CVE-2026-50318

Nov 1, 2026 UTC

Stack-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.

Inspect record →
CVSS7.8high
CVE-2026-49803

Nov 1, 2026 UTC

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally.

Inspect record →
CVSS7.0high
CVE-2026-49805

Nov 1, 2026 UTC

Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locally.

Inspect record →
CVSS7.0high
CVE-2026-49806

Nov 1, 2026 UTC

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.

Inspect record →
CVSS7.0high
CVE-2026-49802

Nov 1, 2026 UTC

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.

Inspect record →
CVSS7.0high
CVE-2026-49801

Nov 1, 2026 UTC

Use of uninitialized resource in Windows SMB allows an authorized attacker to disclose information locally.

Inspect record →
CVSS5.5medium
CVE-2026-50333

Nov 1, 2026 UTC

Missing authentication for critical function in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.

Inspect record →
CVSS7.8high
CVE-2026-50294

Nov 1, 2026 UTC

Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an unauthorized attacker to disclose information locally.

Inspect record →
CVSS6.2medium
CVE-2026-49804

Nov 1, 2026 UTC

Heap-based buffer overflow in Windows USB Video Driver allows an unauthorized attacker to elevate privileges with a physical attack.

Inspect record →
CVSS6.6medium