Home / CVEs
CVE Database
Published vulnerabilities with severity, known exploitation and official sources.
CVE-2026-88159
High · 8.8
CWE-125 Oct 13, 2026
Windows Background Intelligent Transfer Service (BITS) Remote Code Execution Vulnerability
Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.
CVE-2026-88158
Medium · 5.5
CWE-125 Oct 13, 2026
Microsoft Digest Authentication Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Digest Authentication allows an authorized attacker to disclose information locally.
CVE-2026-88154
Medium · 6.5
CWE-125 Oct 13, 2026
Microsoft Office Excel Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-88153
Medium · 6.5
CWE-125 Oct 13, 2026
Microsoft Office Excel Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-88151
Medium · 6.5
CWE-125 Oct 13, 2026
Microsoft Office Excel Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-88140
Medium · 5.5
CWE-125 Oct 13, 2026
Windows Key Storage Provider Information Disclosure Vulnerability
Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally.
CVE-2026-88130
Medium · 6.5
CWE-125 Oct 13, 2026
Role: DNS Server Denial of Service Vulnerability
Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.
CVE-2026-88129
Medium · 6.5
CWE-125 Oct 13, 2026
Role: DNS Server Denial of Service Vulnerability
Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.
CVE-2026-88125
Medium · 6.5
CWE-125 Oct 13, 2026
Role: DNS Server Denial of Service Vulnerability
Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.
CVE-2026-88123
Medium · 6.5
CWE-125 Oct 13, 2026
Role: DNS Server Denial of Service Vulnerability
Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.
CVE-2026-88122
Medium · 6.5
CWE-125 Oct 13, 2026
Role: DNS Server Denial of Service Vulnerability
Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.
CVE-2026-88115
High · 8.8
CWE-125 Oct 13, 2026
Windows Server for NFS Remote Code Execution Vulnerability
Out-of-bounds read in Windows Server for NFS allows an unauthorized attacker to execute code over a network.
CVE-2026-88070
High · 7.8
CWE-125 Oct 13, 2026
Windows BitLocker Elevation of Privilege Vulnerability
Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges locally.
CVE-2026-87698
Medium · 5.5
CWE-125 Oct 13, 2026
Windows Remote Access Service Infrastructure Information Disclosure Vulnerability
Out-of-bounds read in Windows Remote Access Service Infrastructure allows an authorized attacker to disclose information locally.
CVE-2026-85858
High · 7.8
CWE-125 Oct 13, 2026
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
CVE-2026-85853
High · 7.0
CWE-125 Oct 13, 2026
Windows DWM Core Library Elevation of Privilege Vulnerability
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
CVE-2026-85852
Medium · 5.5
CWE-125 Oct 13, 2026
Windows Management Instrumentation Information Disclosure Vulnerability
Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.
CVE-2026-85847
Medium · 6.5
CWE-125 Oct 13, 2026
Windows Print Spooler Components Information Disclosure Vulnerability
Out-of-bounds read in Windows Print Spooler Components allows an unauthorized attacker to disclose information over a network.
CVE-2026-85837
High · 7.8
CWE-125 Oct 13, 2026
Windows Kernel Elevation of Privilege Vulnerability
Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-85830
Medium · 5.5
CWE-125 Oct 13, 2026
Windows Installer Information Disclosure Vulnerability
Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locally.
CVE-2026-85821
Medium · 6.5
CWE-125 Oct 13, 2026
Windows Universal Disk Format File System Driver (UDFS) Information Disclosure Vulnerability
Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally.
CVE-2026-85816
Medium · 5.7
CWE-125 Oct 13, 2026
Windows Wi-Fi Driver Information Disclosure Vulnerability
Out-of-bounds read in Windows Wi-Fi Driver allows an authorized attacker to disclose information over an adjacent network.
CVE-2026-85815
Medium · 5.5
CWE-125 Oct 13, 2026
Windows Device Association Service Information Disclosure Vulnerability
Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally.
CVE-2026-85808
High · 7.5
CWE-125 Oct 13, 2026
Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability
Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network.
CVE-2026-85794
Medium · 5.5
CWE-125 Oct 13, 2026
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to disclose information locally.