Recently updated CVEs

Oct 30, 2026 UTC

Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to execute code locally.

Oct 30, 2026 UTC

Buffer over-read in Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose information over a network.

Oct 30, 2026 UTC

Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network.

Oct 30, 2026 UTC

Use after free in Windows SMB Client allows an unauthorized attacker to execute code over a network.

Oct 30, 2026 UTC

Missing release of resource after effective lifetime in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to deny service locally.

Oct 30, 2026 UTC

Use after free in Windows DNS allows an authorized attacker to execute code over a network.

Oct 30, 2026 UTC

Heap-based buffer overflow in Winsock allows an authorized attacker to elevate privileges locally.

Oct 30, 2026 UTC

Integer underflow (wrap or wraparound) in Windows Remote Access Connection Manager allows an authorized attacker to execute code over a network.

Oct 30, 2026 UTC

Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.

Oct 30, 2026 UTC

Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code with a physical attack.

Oct 30, 2026 UTC

Out-of-bounds read in Windows Mobile Broadband allows an unauthorized attacker to disclose information over a network.

Oct 30, 2026 UTC

Heap-based buffer overflow in Windows Credential Guard allows an authorized attacker to elevate privileges locally.

Oct 30, 2026 UTC

Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.

Oct 30, 2026 UTC

Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Oct 30, 2026 UTC

Null pointer dereference in Windows Schannel allows an authorized attacker to deny service over a network.