Latest CVE Feed

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

Score
Vulnerability
Published
7.0 HIGH
CVE-2026-84020 — Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability

Use after free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.

Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
7.0 HIGH
CVE-2026-84019 — Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability

Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.

Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
7.0 HIGH
CVE-2026-84018 — Windows Print Spooler Components Elevation of Privilege Vulnerability

Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.

Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
7.5 HIGH
CVE-2026-84017 — Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability

Null pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network.

Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
7.8 HIGH
CVE-2026-84016 — Windows EAPHost Service Elevation of Privilege Vulnerability

Out-of-bounds write in Windows EAPHost Service allows an authorized attacker to elevate privileges locally.

Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
9.8 CRITICAL
CVE-2026-84015 — Remote Access Point-to-Point Protocol (PPP) EAP-TLS Remote Code Execution Vulnerability

Heap-based buffer overflow in Remote Access Point-to-Point Protocol (PPP) EAP-TLS allows an unauthorized attacker to execute code over a network.

Oct 13, 2026 Oct 14, 2026
Oct 13, 2026
Oct 14, 2026
7.0 HIGH
CVE-2026-84014 — Windows Device Association Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
7.8 HIGH
CVE-2026-84013 — Windows Telephony Server Elevation of Privilege Vulnerability

Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally.

Oct 13, 2026 Oct 14, 2026
Oct 13, 2026
Oct 14, 2026
8.1 HIGH
CVE-2026-84012 — Windows Remote Desktop Services Remote Code Execution Vulnerability

Double free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.

Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
5.5 MEDIUM
CVE-2026-84011 — Windows SMB Client Security Feature Bypass Vulnerability

Incorrect authorization in Windows SMB Client allows an authorized attacker to bypass a security feature locally.

Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
4.7 MEDIUM
CVE-2026-84009 — Windows Projected File System Tampering Vulnerability

Time-of-check time-of-use (toctou) race condition in Windows Projected File System allows an authorized attacker to perform tampering locally.

Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
7.5 HIGH
CVE-2026-84008 — .NET Denial of Service Vulnerability

Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.

Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
6.5 MEDIUM
CVE-2026-84007 — Remote Desktop Gateway Service Information Disclosure Vulnerability

Out-of-bounds read in Remote Desktop Gateway Service allows an authorized attacker to disclose information over a network.

Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
9.8 CRITICAL
CVE-2026-83935 — Microsoft XML Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft XML allows an unauthorized attacker to execute code over a network.

Oct 13, 2026 Oct 14, 2026
Oct 13, 2026
Oct 14, 2026
8.8 HIGH
CVE-2026-83934 — Windows GDI+ Remote Code Execution Vulnerability

Stack-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network.

Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
5.5 MEDIUM
CVE-2026-83933 — Windows Update Orchestrator Service Information Disclosure Vulnerability

Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authorized attacker to disclose information locally.

Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
7.8 HIGH
CVE-2026-83932 — Windows Group Policy Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Group Policy allows an authorized attacker to elevate privileges locally.

Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
7.8 HIGH
CVE-2026-83931 — Windows Hyper-V Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.

Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
7.0 HIGH
CVE-2026-83930 — Windows Update Orchestrator Service Elevation of Privilege Vulnerability

Use after free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.

Oct 13, 2026 Oct 14, 2026
Oct 13, 2026
Oct 14, 2026
8.8 HIGH
CVE-2026-83929 — Windows GDI Remote Code Execution Vulnerability

Out-of-bounds write in Windows GDI allows an unauthorized attacker to execute code over a network.

Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
Showing 20 of 15306 Results