Latest CVE Feed

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

Score
Vulnerability
Published
7.8 HIGH
CVE-2026-78459 — Microsoft Internet Information Services Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Internet Information Services allows an authorized attacker to elevate privileges locally.

Oct 13, 2026 Oct 16, 2026
Oct 13, 2026
Oct 16, 2026
8.8 HIGH
CVE-2026-77910 — Microsoft Exchange Server Elevation of Privilege Vulnerability

Incorrect authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.

Oct 13, 2026 Oct 14, 2026
Oct 13, 2026
Oct 14, 2026
8.8 HIGH
CVE-2026-77902 — Microsoft Office Excel Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Oct 13, 2026 Oct 15, 2026
Oct 13, 2026
Oct 15, 2026
8.8 HIGH
CVE-2026-77496 — Windows Imaging Component Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.

Oct 13, 2026 Oct 16, 2026
Oct 13, 2026
Oct 16, 2026
9.3 CRITICAL
CVE-2026-75120 — Remote Code Execution (RCE) vulnerability identified in the OpenText™ EnCase SAFE Agents

The OpenText™ (EnCase SAFE Agents) component utilized by OpenText™ Endpoint Investigator, OpenText™ Endpoint Forensics & Response, OpenText™ Information Assurance, and OpenText™ Endpoint Security con…

Remote | Authentication
Oct 13, 2026 Oct 16, 2026
Oct 13, 2026
Oct 16, 2026
7.8 HIGH
CVE-2026-73027 — Windows Setup Files Cleanup Elevation of Privilege Vulnerability

External control of system or configuration setting in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.

Oct 13, 2026 Oct 16, 2026
Oct 13, 2026
Oct 16, 2026
7.0 HIGH
CVE-2026-72969 — Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability

Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.

Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
7.0 HIGH
CVE-2026-72968 — Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability

Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.

Oct 13, 2026 Oct 16, 2026
Oct 13, 2026
Oct 16, 2026
7.0 HIGH
CVE-2026-72955 — Windows Application Compatibility Cache Elevation of Privilege Vulnerability

Use after free in Windows Application Compatibility Cache allows an authorized attacker to elevate privileges locally.

Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
7.0 HIGH
CVE-2026-72934 — Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability

Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.

Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
6.4 MEDIUM
CVE-2026-71347 — Windows Security Center Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Security Center allows an authorized attacker to elevate privileges locally.

Oct 13, 2026 Oct 16, 2026
Oct 13, 2026
Oct 16, 2026
8.8 HIGH
CVE-2026-70580 — Windows Credential Guard Spoofing Vulnerability

Missing authentication for critical function in Windows Credential Guard allows an authorized attacker to perform spoofing locally.

Oct 13, 2026 Oct 16, 2026
Oct 13, 2026
Oct 16, 2026
8.1 HIGH
CVE-2026-70571 — Microsoft Exchange Server Remote Code Execution Vulnerability

Stack-based buffer overflow in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network.

Oct 13, 2026 Oct 14, 2026
Oct 13, 2026
Oct 14, 2026
7.8 HIGH
CVE-2026-70566 — Windows Schannel Elevation of Privilege Vulnerability

Null pointer dereference in Windows Schannel allows an authorized attacker to elevate privileges locally.

Oct 13, 2026 Oct 16, 2026
Oct 13, 2026
Oct 16, 2026
8.8 HIGH
CVE-2026-70343 — Microsoft MPEG-2 Video Extension Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft MPEG-2 Video Extension allows an unauthorized attacker to execute code over a network.

Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
7.8 HIGH
CVE-2026-70303 — Windows Kernel Elevation of Privilege Vulnerability

Out-of-bounds write in Windows Kernel allows an authorized attacker to elevate privileges locally.

Oct 13, 2026 Oct 16, 2026
Oct 13, 2026
Oct 16, 2026
8.8 HIGH
CVE-2026-70302 — Microsoft Office Word Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Oct 13, 2026 Oct 15, 2026
Oct 13, 2026
Oct 15, 2026
8.8 HIGH
CVE-2026-70301 — Microsoft Office Word Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Oct 13, 2026 Oct 15, 2026
Oct 13, 2026
Oct 15, 2026
9.8 CRITICAL
CVE-2026-70300 — Microsoft Office Word Remote Code Execution Vulnerability

Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Oct 13, 2026 Oct 14, 2026
Oct 13, 2026
Oct 14, 2026
8.8 HIGH
CVE-2026-70299 — Windows Bind Filter Driver Elevation of Privilege Vulnerability

Improper access control in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.

Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
Showing 20 of 15171 Results