Latest vulnerabilities
Every new CVE with its exploitation status, public exploits and fixes — from nearly 30 public sources, updated hourly.
- Tracked
- 409,793
- Last 24h
- 342
- Critical, 7 days
- 340
- Known exploited
- 1,779
97,885 results · Clear filters · Feed
-
High 7.0CVE-2026-83834 Public exploit
Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability
Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.
-
High 7.0CVE-2026-83844 Public exploit
Windows Paint Remote Code Execution Vulnerability
Out-of-bounds read in Windows Paint allows an unauthorized attacker to execute code locally.
-
High 7.0
Windows TCP/IP Elevation of Privilege Vulnerability
Double free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
-
High 7.0
Connected Devices Platform Service (Cdpsvc) Elevation of Privilege Vulnerability
Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Event Tracing Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Event Tracing allows an unauthorized attacker to execute code locally.
-
High 8.0
Windows Bluetooth A2DP driver Elevation of Privilege Vulnerability
Integer underflow (wrap or wraparound) in Windows Bluetooth A2DP driver allows an authorized attacker to elevate privileges over an adjacent network.
-
High 7.8
Windows COM+ Event System Service Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Hyper-V Elevation of Privilege Vulnerability
Time-of-check time-of-use (toctou) race condition in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
-
High 7.5
Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability
Out-of-bounds read in Windows Internet Key Exchange (IKE) Protocol allows an unauthorized attacker to deny service over a network.
-
High 7.8
Microsoft Account Elevation of Privilege Vulnerability
Heap-based buffer overflow in Microsoft Account allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Kernel Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Bluetooth Port Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Bluetooth Port Driver allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Kernel Elevation of Privilege Vulnerability
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
-
High 8.8
Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability
Absolute path traversal in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges over a network.
-
High 7.8
Windows Error Reporting Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Spaceport.sys Elevation of Privilege Vulnerability
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows MIDI Service Module Elevation of Privileges Vulnerability
Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Update Orchestrator Service Elevation of Privilege Vulnerability
Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Kernel Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
-
High 8.8
Windows Encrypting File System (EFS) Remote Code Execution Vulnerability
Improper control of generation of code ('code injection') in Windows Encrypting File System (EFS) allows an authorized attacker to execute code over a network.
-
High 7.8
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Installer Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Camera Frame Server Monitor Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally.
-
High 7.5
Microsoft OpenSSH for Windows Remote Code Execution Vulnerability
Heap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.
-
High 7.0
Windows Installer Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Error Reporting Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to execute code locally.
-
High 7.8
Windows NTFS Remote Code Execution Vulnerability
Out-of-bounds write in Windows NTFS allows an authorized attacker to execute code locally.
-
High 7.0
Windows Hello Elevation of Privilege Vulnerability
Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Overlay Filter Elevation of Privilege Vulnerability
Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows DWM Core Library Elevation of Privilege Vulnerability
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
-
High 7.0
Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability
Use after free in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Overlay Filter Elevation of Privilege Vulnerability
Use after free in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
-
High 7.1
Windows Error Reporting Tampering Vulnerability
Missing authentication for critical function in Windows Error Reporting allows an authorized attacker to perform tampering locally.
-
High 7.8
Microsoft Windows Search Component Elevation of Privilege Vulnerability
Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Client-Side Caching (CSC) Service Elevation of Privilege Vulnerability
Stack-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Installer Elevation of Privilege Vulnerability
Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Now Playing Session Manager Elevation of Privilege Vulnerability
Use after free in Windows Now Playing Session Manager allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows DHCP Server Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability
Out-of-bounds read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.