Vulnerability intelligence / live index

Recently updated CVEs

A working index of published vulnerability records, ordered by latest update. Open a record to inspect its score, vector, and impact metrics.

Data source

CVE Program / CVE List®

Updated continuously

CVE-2026-96254

Oct 23, 2026 UTC

Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.

Inspect record →
CVSS7.0high
CVE-2026-96310

Oct 23, 2026 UTC

Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.

Inspect record →
CVSS7.0high
CVE-2026-96301

Oct 23, 2026 UTC

Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.

Inspect record →
CVSS7.0high
CVE-2026-96250

Oct 23, 2026 UTC

Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.

Inspect record →
CVSS7.0high
CVE-2026-96249

Oct 23, 2026 UTC

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

Inspect record →
CVSS7.8high
CVE-2026-96243

Oct 23, 2026 UTC

Improper link resolution before file access ('link following') in Windows WalletService allows an authorized attacker to elevate privileges locally.

Inspect record →
CVSS7.8high
CVE-2026-96238

Oct 23, 2026 UTC

Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network.

Inspect record →
CVSS6.5medium
CVE-2026-96237

Oct 23, 2026 UTC

Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to execute code over a network.

Inspect record →
CVSS7.5high
CVE-2026-96234

Oct 23, 2026 UTC

Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.

Inspect record →
CVSS5.3medium
CVE-2026-96232

Oct 23, 2026 UTC

Out-of-bounds read in .NET allows an unauthorized attacker to disclose information over a network.

Inspect record →
CVSS7.5high
CVE-2026-96230

Oct 23, 2026 UTC

Improper neutralization of input during web page generation ('cross-site scripting') in ASP.NET Core allows an unauthorized attacker to execute code over a network.

Inspect record →
CVSS8.8high
CVE-2026-96229

Oct 23, 2026 UTC

Permissive list of allowed inputs in .NET allows an unauthorized attacker to disclose information over a network.

Inspect record →
CVSS6.5medium
CVE-2026-96233

Oct 23, 2026 UTC

Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network.

Inspect record →
CVSS7.5high
CVE-2026-96225

Oct 23, 2026 UTC

Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.

Inspect record →
CVSS7.8high