| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-70164 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-70163 | Hig | 0.49 | 7.5 | 0.01 | Oct 13, 2026 | Allocation of resources without limits or throttling in OpenSSH for Windows allows an unauthorized attacker to deny service over a network. | ||
| CVE-2026-70161 | Hig | 0.47 | 7.3 | 0.00 | Oct 13, 2026 | Improper limitation of a pathname to a restricted directory ('path traversal') in .NET allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-70160 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-70159 | Hig | 0.42 | 7.5 | 0.01 | Oct 13, 2026 | Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network. | ||
| CVE-2026-70158 | Hig | 0.57 | 8.8 | 0.01 | Oct 13, 2026 | Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine | ||
| CVE-2026-70156 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-70155 | Hig | 0.49 | 7.5 | 0.01 | Oct 13, 2026 | Missing release of memory after effective lifetime in Windows DNS allows an unauthorized attacker to deny service over a network. | ||
| CVE-2026-70151 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-70150 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-70149 | Hig | 0.57 | 8.8 | 0.01 | Oct 13, 2026 | Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver (csc.sys) allows an authorized attacker to disclose information locally. | ||
| CVE-2026-70144 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-70143 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Heap-based buffer overflow in Windows Network File System allows an authorized attacker to execute code locally. | ||
| CVE-2026-70142 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Untrusted search path in Windows Update Service allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-70140 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-70139 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Heap-based buffer overflow in Windows Update Service allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-70138 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-70136 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-70134 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Windows Event Tracing allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-70133 | Hig | 0.49 | 7.5 | 0.01 | Oct 13, 2026 | Allocation of resources without limits or throttling in Windows SMB Server allows an unauthorized attacker to deny service over a network. | ||
| CVE-2026-70132 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Heap-based buffer overflow in Windows Portable Device File System Driver allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-70131 | Hig | 0.51 | 7.8 | 0.01 | Oct 13, 2026 | Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to elevate privileges locally. | ||
| CVE-2026-70127 | Hig | 0.53 | 8.1 | 0.01 | Oct 13, 2026 | Use after free in DNS Server allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-70126 | Hig | 0.46 | 7.1 | 0.01 | Oct 13, 2026 | Out-of-bounds read in Windows Bluetooth Port Driver allows an unauthorized attacker to execute code over an adjacent network. | ||
| CVE-2026-70123 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Numeric truncation error in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-70121 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-70118 | Hig | 0.45 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-70117 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-70115 | Hig | 0.45 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-70114 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-70113 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Integer overflow or wraparound in Windows Client for NFS allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-70112 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to execute code locally. | ||
| CVE-2026-70111 | Hig | 0.53 | 8.1 | 0.01 | Oct 13, 2026 | Untrusted pointer dereference in Windows Kernel allows an unauthorized attacker to elevate privileges over a network. | ||
| CVE-2026-70110 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Stack-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally. | ||
| CVE-2026-70109 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally. | ||
| CVE-2026-70108 | Hig | 0.51 | 7.8 | 0.01 | Oct 13, 2026 | Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-70106 | Hig | 0.51 | 7.8 | 0.01 | Oct 13, 2026 | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-70104 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Untrusted pointer dereference in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-70103 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-70102 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Use after free in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-70095 | Hig | 0.49 | 7.5 | 0.01 | Oct 13, 2026 | Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-70093 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Heap-based buffer overflow in Windows Rich Text Edit Control allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-70092 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally. | ||
| CVE-2026-70089 | Hig | 0.57 | 8.8 | 0.01 | Oct 13, 2026 | Heap-based buffer overflow in Windows GDI allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-70086 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-70082 | Hig | 0.49 | 7.5 | 0.01 | Oct 13, 2026 | Uncaught exception in Windows DNS allows an unauthorized attacker to deny service over a network. | ||
| CVE-2026-70079 | Hig | 0.49 | 7.5 | 0.01 | Oct 13, 2026 | Improper enforcement of behavioral workflow in Windows DNS allows an unauthorized attacker to deny service over a network. | ||
| CVE-2026-70076 | Hig | 0.45 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-70069 | Hig | 0.57 | 8.8 | 0.01 | Oct 13, 2026 | Stack-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over a network. | ||
| CVE-2026-70068 | Hig | 0.57 | 8.8 | 0.01 | Oct 13, 2026 | Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an unauthorized attacker to elevate privileges over a network. |
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
- risk 0.49cvss 7.5epss 0.01
Allocation of resources without limits or throttling in OpenSSH for Windows allows an unauthorized attacker to deny service over a network.
- risk 0.47cvss 7.3epss 0.00
Improper limitation of a pathname to a restricted directory ('path traversal') in .NET allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
- risk 0.42cvss 7.5epss 0.01
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.
- risk 0.57cvss 8.8epss 0.01
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
- risk 0.46cvss 7.0epss 0.00
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
- risk 0.49cvss 7.5epss 0.01
Missing release of memory after effective lifetime in Windows DNS allows an unauthorized attacker to deny service over a network.
- risk 0.51cvss 7.8epss 0.00
Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
- risk 0.57cvss 8.8epss 0.01
Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver (csc.sys) allows an authorized attacker to disclose information locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Windows Network File System allows an authorized attacker to execute code locally.
- risk 0.51cvss 7.8epss 0.00
Untrusted search path in Windows Update Service allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Windows Update Service allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows Event Tracing allows an authorized attacker to elevate privileges locally.
- risk 0.49cvss 7.5epss 0.01
Allocation of resources without limits or throttling in Windows SMB Server allows an unauthorized attacker to deny service over a network.
- risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Windows Portable Device File System Driver allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.01
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to elevate privileges locally.
- risk 0.53cvss 8.1epss 0.01
Use after free in DNS Server allows an unauthorized attacker to execute code over a network.
- risk 0.46cvss 7.1epss 0.01
Out-of-bounds read in Windows Bluetooth Port Driver allows an unauthorized attacker to execute code over an adjacent network.
- risk 0.51cvss 7.8epss 0.00
Numeric truncation error in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
- risk 0.45cvss 7.0epss 0.00
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
- risk 0.45cvss 7.0epss 0.00
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Integer overflow or wraparound in Windows Client for NFS allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to execute code locally.
- risk 0.53cvss 8.1epss 0.01
Untrusted pointer dereference in Windows Kernel allows an unauthorized attacker to elevate privileges over a network.
- risk 0.51cvss 7.8epss 0.00
Stack-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.01
Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.01
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Untrusted pointer dereference in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Use after free in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.
- risk 0.49cvss 7.5epss 0.01
Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network.
- risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Windows Rich Text Edit Control allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Windows GDI allows an unauthorized attacker to execute code over a network.
- risk 0.46cvss 7.0epss 0.00
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
- risk 0.49cvss 7.5epss 0.01
Uncaught exception in Windows DNS allows an unauthorized attacker to deny service over a network.
- risk 0.49cvss 7.5epss 0.01
Improper enforcement of behavioral workflow in Windows DNS allows an unauthorized attacker to deny service over a network.
- risk 0.45cvss 7.0epss 0.00
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
- risk 0.57cvss 8.8epss 0.01
Stack-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an unauthorized attacker to elevate privileges over a network.