Vulnerability intelligence / live index

Recently updated CVEs

A working index of published vulnerability records, ordered by latest update. Open a record to inspect its score, vector, and impact metrics.

Data source

CVE Program / CVE List®

Updated continuously

CVE-2026-102188

Oct 23, 2026 UTC

Untrusted pointer dereference in Windows Storage Port Driver allows an unauthorized attacker to elevate privileges with a physical attack.

Inspect record →
CVSS6.8medium
CVE-2026-102186

Oct 23, 2026 UTC

Untrusted pointer dereference in Windows Network File System allows an authorized attacker to disclose information locally.

Inspect record →
CVSS4.7medium
CVE-2026-102187

Oct 23, 2026 UTC

Use of uninitialized resource in Windows Kernel allows an authorized attacker to disclose information locally.

Inspect record →
CVSS5.5medium
CVE-2026-96209

Oct 23, 2026 UTC

Out-of-bounds read in Windows Network File System allows an authorized attacker to elevate privileges locally.

Inspect record →
CVSS7.0high
CVE-2026-88226

Oct 23, 2026 UTC

Out-of-bounds read in Windows Storage Port Driver allows an unauthorized attacker to disclose information with a physical attack.

Inspect record →
CVSS4.6medium
CVE-2026-70212

Oct 23, 2026 UTC

Improper restriction of communication channel to intended endpoints in Windows Security Center allows an authorized attacker to elevate privileges locally.

Inspect record →
CVSS7.0high
CVE-2026-100225

Oct 23, 2026 UTC

Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.

Inspect record →
CVSS7.0high
CVE-2026-100222

Oct 23, 2026 UTC

Heap-based buffer overflow in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.

Inspect record →
CVSS9.8critical
CVE-2026-69506

Oct 23, 2026 UTC

Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally.

Inspect record →
CVSS4.7medium
CVE-2026-88219

Oct 23, 2026 UTC

Untrusted pointer dereference in RPC Runtime allows an unauthorized attacker to execute code over a network.

Inspect record →
CVSS8.8high
CVE-2026-100220

Oct 23, 2026 UTC

Heap-based buffer overflow in Windows Media Video Decoder allows an unauthorized attacker to execute code over a network.

Inspect record →
CVSS8.8high
CVE-2026-100219

Oct 23, 2026 UTC

Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network.

Inspect record →
CVSS9.8critical
CVE-2026-100218

Oct 23, 2026 UTC

Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.

Inspect record →
CVSS8.1high
CVE-2026-100217

Oct 23, 2026 UTC

Improper privilege management in Windows Group Policy allows an authorized attacker to elevate privileges locally.

Inspect record →
CVSS7.8high