Latest CVE Feed

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

Score
Vulnerability
Published
6.5 MEDIUM
CVE-2026-69922 — Microsoft Office Excel Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

Oct 13, 2026 Oct 14, 2026
Oct 13, 2026
Oct 14, 2026
5.5 MEDIUM
CVE-2026-69919 — Windows Cryptographic Services Information Disclosure Vulnerability

Out-of-bounds read in Windows Cryptographic Services allows an authorized attacker to disclose information locally.

Oct 13, 2026 Oct 16, 2026
Oct 13, 2026
Oct 16, 2026
8.8 HIGH
CVE-2026-69918 — Windows Core Messaging Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges locally.

Oct 13, 2026 Oct 16, 2026
Oct 13, 2026
Oct 16, 2026
7.8 HIGH
CVE-2026-69916 — Windows NTFS Elevation of Privilege Vulnerability

Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally.

Oct 13, 2026 Oct 16, 2026
Oct 13, 2026
Oct 16, 2026
7.0 HIGH
CVE-2026-69915 — Windows NTFS Elevation of Privilege Vulnerability

Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally.

Oct 13, 2026 Oct 16, 2026
Oct 13, 2026
Oct 16, 2026
5.5 MEDIUM
CVE-2026-69914 — Windows AppX Deployment Service Information Disclosure Vulnerability

Out-of-bounds read in Windows AppX Deployment Service allows an authorized attacker to disclose information locally.

Oct 13, 2026 Oct 16, 2026
Oct 13, 2026
Oct 16, 2026
8.1 HIGH
CVE-2026-69913 — Windows TCP/IP Remote Code Execution Vulnerability

Use after free in Windows TCP/IP allows an unauthorized attacker to execute code over a network.

Oct 13, 2026 Oct 16, 2026
Oct 13, 2026
Oct 16, 2026
7.8 HIGH
CVE-2026-69909 — Microsoft COM for Windows Elevation of Privilege Vulnerability

Heap-based buffer overflow in Microsoft COM for Windows allows an authorized attacker to elevate privileges locally.

Oct 13, 2026 Oct 16, 2026
Oct 13, 2026
Oct 16, 2026
5.5 MEDIUM
CVE-2026-69905 — Windows AppX Deployment Service Tampering Vulnerability

Missing authorization in Windows AppX Deployment Service allows an authorized attacker to perform tampering locally.

Oct 13, 2026 Oct 16, 2026
Oct 13, 2026
Oct 16, 2026
6.7 MEDIUM
CVE-2026-69902 — Windows NTFS Remote Code Execution Vulnerability

Untrusted pointer dereference in Windows NTFS allows an authorized attacker to execute code locally.

Oct 13, 2026 Oct 16, 2026
Oct 13, 2026
Oct 16, 2026
7.8 HIGH
CVE-2026-69898 — Windows Kernel Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

Oct 13, 2026 Oct 16, 2026
Oct 13, 2026
Oct 16, 2026
9.8 CRITICAL
CVE-2026-69886 — Windows Imaging Component Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.

Oct 13, 2026 Oct 16, 2026
Oct 13, 2026
Oct 16, 2026
7.8 HIGH
CVE-2026-69884 — Windows GDI Elevation of Privilege Vulnerability

Buffer over-read in Windows GDI allows an authorized attacker to elevate privileges locally.

Oct 13, 2026 Oct 16, 2026
Oct 13, 2026
Oct 16, 2026
9.8 CRITICAL
CVE-2026-69883 — Windows iSCSI Remote Code Execution Vulnerability

Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.

Oct 13, 2026 Oct 16, 2026
Oct 13, 2026
Oct 16, 2026
7.8 HIGH
CVE-2026-69882 — Windows Update Elevation of Privilege Vulnerability

Untrusted search path in Windows Update allows an authorized attacker to elevate privileges locally.

Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
7.8 HIGH
CVE-2026-69880 — Desktop Window Manager Elevation of Privilege Vulnerability

Access of resource using incompatible type ('type confusion') in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

Oct 13, 2026 Oct 16, 2026
Oct 13, 2026
Oct 16, 2026
6.5 MEDIUM
CVE-2026-69877 — Azure DevOps Information Disclosure Vulnerability

Origin validation error in Azure DevOps allows an unauthorized attacker to disclose information over a network.

Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
7.8 HIGH
CVE-2026-69867 — SQLite Elevation of Privilege Vulnerability

Out-of-bounds read in SQLite allows an authorized attacker to elevate privileges locally.

Oct 13, 2026 Oct 16, 2026
Oct 13, 2026
Oct 16, 2026
7.0 HIGH
CVE-2026-69856 — Windows Storage Elevation of Privilege Vulnerability

Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.

Oct 13, 2026 Oct 16, 2026
Oct 13, 2026
Oct 16, 2026
7.8 HIGH
CVE-2026-69850 — Windows Certificates Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows Certificates allows an authorized attacker to elevate privileges locally.

Oct 13, 2026 Oct 16, 2026
Oct 13, 2026
Oct 16, 2026
Showing 20 of 15169 Results