Latest CVE Feed

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

Score
Vulnerability
Published
7.5 HIGH
CVE-2026-108131 — Active Directory Federation Services (AD FS) Spoofing Vulnerability

No cwe for this issue in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.

Oct 13, 2026 Oct 16, 2026
Oct 13, 2026
Oct 16, 2026
7.8 HIGH
CVE-2026-108130 — Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.

Oct 13, 2026 Oct 28, 2026
Oct 13, 2026
Oct 28, 2026
6.5 MEDIUM
CVE-2026-108129 — Role: DNS Server Information Disclosure Vulnerability

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

Oct 13, 2026 Oct 16, 2026
Oct 13, 2026
Oct 16, 2026
6.5 MEDIUM
CVE-2026-108128 — Role: DNS Server Information Disclosure Vulnerability

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

Oct 13, 2026 Oct 16, 2026
Oct 13, 2026
Oct 16, 2026
6.5 MEDIUM
CVE-2026-108127 — Role: DNS Server Information Disclosure Vulnerability

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

Oct 13, 2026 Oct 16, 2026
Oct 13, 2026
Oct 16, 2026
6.9 MEDIUM
CVE-2026-107607 — Missing authentication for critical function in Swann Communications SWIFI-SE2KIC

SWIFI-SE2KIC firmware versions 2.0.22 and prior are vulnerable to a Missing Authentication for Critical Function vulnerability that could allow an attacker on the local network to access a real-time …

| Authentication
Oct 13, 2026 Oct 14, 2026
Oct 13, 2026
Oct 14, 2026
6.9 MEDIUM
CVE-2026-107606 — Missing authentication for critical function in Swann Communications SWIFI-SE2KIC

SWIFI-SE2KIC firmware versions 2.0.22 and prior are vulnerable to a Missing Authentication for Critical Function vulnerability that could allow an attacker on the local network to retrieve a snapshot…

| Authentication
Oct 13, 2026 Oct 14, 2026
Oct 13, 2026
Oct 14, 2026
6.2 MEDIUM
CVE-2026-107605 — Missing authentication for critical function in Swann Communications SWIFI-SE2KIC

SWIFI-SE2KIC firmware versions 2.0.22 and prior are vulnerable to a Missing Authentication for Critical Function vulnerability that could allow an attacker on the local network to view live video fee…

| Authentication
Oct 13, 2026 Oct 16, 2026
Oct 13, 2026
Oct 16, 2026
7.8 HIGH
CVE-2026-106625 — Adobe Framemaker | Out-of-bounds Write (CWE-787)

Adobe Framemaker is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interac…

windows framemaker | Memory Corruption
Oct 13, 2026 Nov 10, 2026
Oct 13, 2026
Nov 10, 2026
8.8 HIGH
CVE-2026-105733 — Windows Hyper-V Remote Code Execution Vulnerability

Improper access control in Windows Hyper-V allows an authorized attacker to execute code locally.

Oct 13, 2026 Oct 28, 2026
Oct 13, 2026
Oct 28, 2026
7.3 HIGH
CVE-2026-105732 — SysInternals Elevation of Privilege Vulnerability

Stack-based buffer overflow in SysInternals allows an authorized attacker to elevate privileges locally.

Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
5.5 MEDIUM
CVE-2026-105731 — Microsoft Office Graphics Component Information Disclosure Vulnerability

Use of uninitialized resource in Microsoft Graphics Component allows an authorized attacker to disclose information locally.

Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
7.1 HIGH
CVE-2026-105729 — SysInternals Elevation of Privilege Vulnerability

Untrusted pointer dereference in SysInternals allows an authorized attacker to elevate privileges locally.

Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
7.5 HIGH
CVE-2026-105728 — Dynamics Business Central Information Disclosure Vulnerability

Improper authentication in Dynamics Business Central allows an unauthorized attacker to disclose information over a network.

Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
8.8 HIGH
CVE-2026-105727 — Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability

External control of file name or path in Dynamics Business Central allows an authorized attacker to elevate privileges over a network.

Oct 13, 2026 Nov 10, 2026
Oct 13, 2026
Nov 10, 2026
5.5 MEDIUM
CVE-2026-105726 — Microsoft Defender Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Defender allows an authorized attacker to disclose information locally.

Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
7.0 HIGH
CVE-2026-105725 — Windows Security App Elevation of Privilege Vulnerability

Use after free in Windows Security App allows an authorized attacker to elevate privileges locally.

Oct 13, 2026 Nov 03, 2026
Oct 13, 2026
Nov 03, 2026
9.8 CRITICAL
CVE-2026-105723 — Windows Distributed File System (DFS) Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows Distributed File System (DFS) allows an unauthorized attacker to elevate privileges over a network.

Oct 13, 2026 Oct 26, 2026
Oct 13, 2026
Oct 26, 2026
7.0 HIGH
CVE-2026-105722 — Windows Broadcast DVR User Service Elevation of Privilege Vulnerability

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

Oct 13, 2026 Oct 26, 2026
Oct 13, 2026
Oct 26, 2026
4.3 MEDIUM
CVE-2026-105720 — Microsoft Office SharePoint Elevation of Privilege Vulnerability

Improper authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

Oct 13, 2026 Nov 10, 2026
Oct 13, 2026
Nov 10, 2026
Showing 20 of 18872 Results