Latest CVE Feed

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

Score
Vulnerability
Published
8.8 HIGH
CVE-2026-70069 — Windows DHCP Server Remote Code Execution Vulnerability

Stack-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over a network.

Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
8.8 HIGH
CVE-2026-70068 — Windows Client-Side Caching (CSC) Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an unauthorized attacker to elevate privileges over a network.

Oct 13, 2026 Oct 16, 2026
Oct 13, 2026
Oct 16, 2026
7.0 HIGH
CVE-2026-70067 — Windows Win32k Elevation of Privilege Vulnerability

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

Oct 13, 2026 Oct 14, 2026
Oct 13, 2026
Oct 14, 2026
7.0 HIGH
CVE-2026-70066 — Windows DHCP Server Elevation of Privilege Vulnerability

Use after free in Windows DHCP Server allows an authorized attacker to elevate privileges locally.

Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
7.8 HIGH
CVE-2026-70064 — Windows Kerberos Elevation of Privilege Vulnerability

Integer underflow (wrap or wraparound) in Windows Kerberos allows an authorized attacker to elevate privileges locally.

Oct 13, 2026 Oct 16, 2026
Oct 13, 2026
Oct 16, 2026
4.7 MEDIUM
CVE-2026-70063 — Windows Kernel Information Disclosure Vulnerability

Out-of-bounds read in Windows Kernel allows an authorized attacker to disclose information locally.

Oct 13, 2026 Oct 16, 2026
Oct 13, 2026
Oct 16, 2026
8.1 HIGH
CVE-2026-70062 — Windows libarchive Remote Code Execution Vulnerability

Double free in Windows Libarchive allows an unauthorized attacker to execute code over a network.

Oct 13, 2026 Oct 16, 2026
Oct 13, 2026
Oct 16, 2026
7.8 HIGH
CVE-2026-70060 — Windows Win32k Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

Oct 13, 2026 Oct 16, 2026
Oct 13, 2026
Oct 16, 2026
7.8 HIGH
CVE-2026-70059 — Windows OLE Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally.

Oct 13, 2026 Oct 16, 2026
Oct 13, 2026
Oct 16, 2026
7.5 HIGH
CVE-2026-70058 — Windows DHCP Server Remote Code Execution Vulnerability

Out-of-bounds write in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
5.5 MEDIUM
CVE-2026-70057 — Windows Routing and Remote Access Service (RRAS) Security Feature Bypass Vulnerability

Incorrect authorization in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to bypass a security feature locally.

Oct 13, 2026 Oct 16, 2026
Oct 13, 2026
Oct 16, 2026
7.0 HIGH
CVE-2026-70056 — Windows Update Service Elevation of Privilege Vulnerability

Use after free in Windows Update Service allows an authorized attacker to elevate privileges locally.

Oct 13, 2026 Oct 16, 2026
Oct 13, 2026
Oct 16, 2026
5.5 MEDIUM
CVE-2026-70055 — Windows Cryptographic Services Information Disclosure Vulnerability

Exposure of sensitive system information to an unauthorized control sphere in Windows Cryptographic Services allows an authorized attacker to disclose information locally.

Oct 13, 2026 Oct 16, 2026
Oct 13, 2026
Oct 16, 2026
7.8 HIGH
CVE-2026-70054 — Windows NetBIOS Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows NetBIOS allows an authorized attacker to elevate privileges locally.

Oct 13, 2026 Oct 16, 2026
Oct 13, 2026
Oct 16, 2026
7.8 HIGH
CVE-2026-70052 — Microsoft PowerShell Remote Code Execution Vulnerability

Integer overflow or wraparound in Windows PowerShell allows an authorized attacker to execute code locally.

Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
7.8 HIGH
CVE-2026-70051 — Windows SmartScreen Elevation of Privilege Vulnerability

Access of resource using incompatible type ('type confusion') in Windows SmartScreen allows an authorized attacker to elevate privileges locally.

Oct 13, 2026 Oct 16, 2026
Oct 13, 2026
Oct 16, 2026
8.0 HIGH
CVE-2026-70049 — Microsoft Configuration Manager Elevation of Privilege Vulnerability

Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over an adjacent network.

Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
7.8 HIGH
CVE-2026-70048 — Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.

Oct 13, 2026 Oct 16, 2026
Oct 13, 2026
Oct 16, 2026
7.0 HIGH
CVE-2026-70045 — Windows Work Folders Elevation of Privilege Vulnerability

Use after free in Windows Work Folders allows an authorized attacker to elevate privileges locally.

Oct 13, 2026 Oct 16, 2026
Oct 13, 2026
Oct 16, 2026
5.5 MEDIUM
CVE-2026-70044 — Microsoft Windows Media Foundation Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Windows Media Foundation allows an unauthorized attacker to disclose information locally.

Oct 13, 2026 Oct 16, 2026
Oct 13, 2026
Oct 16, 2026
Showing 20 of 15162 Results