Home / CVEs
CVE Database
Published vulnerabilities with severity, known exploitation and official sources.
CVE-2026-70017
Medium · 5.5
CWE-843 Oct 13, 2026
Windows Secure Kernel Mode Information Disclosure Vulnerability
Access of resource using incompatible type ('type confusion') in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally.
CVE-2026-70011
Medium · 5.5
CWE-125 Oct 13, 2026
Windows IP Over USB Service Information Disclosure Vulnerability
Out-of-bounds read in Windows IP Over USB Service allows an authorized attacker to disclose information locally.
CVE-2026-70005
Medium · 5.9
CWE-1390 Oct 13, 2026
Active Directory Federation Services (AD FS) Security Feature Bypass Vulnerability
Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-69999
Medium · 5.5
CWE-125 Oct 13, 2026
Windows Update Information Disclosure Vulnerability
Out-of-bounds read in Windows Update allows an authorized attacker to disclose information locally.
CVE-2026-69982
Medium · 5.9
CWE-1390 Oct 13, 2026
Active Directory Federation Services (AD FS) Security Feature Bypass Vulnerability
Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-69979
Medium · 5.5
CWE-424 Oct 13, 2026
Windows AppX Deployment Service Security Feature Bypass Vulnerability
Improper protection of alternate path in Windows AppX Deployment Service allows an authorized attacker to bypass a security feature locally.
CVE-2026-69978
Medium · 5.5
CWE-476 Oct 13, 2026
Microsoft Windows VMSwitch Denial of Service Vulnerability
Null pointer dereference in Windows VMSwitch allows an authorized attacker to deny service locally.
CVE-2026-69974
Medium · 4.7
CWE-125 Oct 13, 2026
Desktop Window Manager Information Disclosure Vulnerability
Out-of-bounds read in Desktop Window Manager allows an authorized attacker to disclose information locally.
CVE-2026-69973
Medium · 6.5
CWE-22 Oct 13, 2026
Windows libarchive Tampering Vulnerability
Improper limitation of a pathname to a restricted directory ('path traversal') in Windows Libarchive allows an unauthorized attacker to perform tampering over a network.
CVE-2026-69971
Medium · 5.5
CWE-863 Oct 13, 2026
Windows Kernel-Mode Drivers Information Disclosure Vulnerability
Incorrect authorization in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.
CVE-2026-69969
Medium · 4.7
CWE-59 Oct 13, 2026
Windows AppX Deployment Service Information Disclosure Vulnerability
Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized attacker to disclose information locally.
CVE-2026-69968
Medium · 6.5
CWE-23 Oct 13, 2026
Windows libarchive Tampering Vulnerability
Relative path traversal in Windows Libarchive allows an unauthorized attacker to perform tampering over a network.
CVE-2026-69967
Medium · 5.5
CWE-125 Oct 13, 2026
Windows Overlay Filter Information Disclosure Vulnerability
Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to disclose information locally.
CVE-2026-69958
Medium · 6.8
CWE-122 Oct 13, 2026
Windows Overlay Filter Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Overlay Filter allows an unauthorized attacker to execute code with a physical attack.
CVE-2026-69955
Medium · 6.5
CWE-125 Oct 13, 2026
Windows Client for NFS Information Disclosure Vulnerability
Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information over a network.
CVE-2026-69954
Medium · 5.5
CWE-126 Oct 13, 2026
Windows Overlay Filter Information Disclosure Vulnerability
Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally.
CVE-2026-69947
Medium · 6.8
CWE-122 Oct 13, 2026
Windows Overlay Filter Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Overlay Filter allows an unauthorized attacker to execute code with a physical attack.
CVE-2026-69940
Medium · 6.5
CWE-125 Oct 13, 2026
Windows Client for NFS Information Disclosure Vulnerability
Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information over a network.
CVE-2026-69922
Medium · 6.5
CWE-125 Oct 13, 2026
Microsoft Office Excel Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-69919
Medium · 5.5
CWE-125 Oct 13, 2026
Windows Cryptographic Services Information Disclosure Vulnerability
Out-of-bounds read in Windows Cryptographic Services allows an authorized attacker to disclose information locally.
CVE-2026-69914
Medium · 5.5
CWE-125 Oct 13, 2026
Windows AppX Deployment Service Information Disclosure Vulnerability
Out-of-bounds read in Windows AppX Deployment Service allows an authorized attacker to disclose information locally.
CVE-2026-69905
Medium · 5.5
CWE-862 Oct 13, 2026
Windows AppX Deployment Service Tampering Vulnerability
Missing authorization in Windows AppX Deployment Service allows an authorized attacker to perform tampering locally.
CVE-2026-69902
Medium · 6.7
CWE-822 Oct 13, 2026
Windows NTFS Remote Code Execution Vulnerability
Untrusted pointer dereference in Windows NTFS allows an authorized attacker to execute code locally.
CVE-2026-69877
Medium · 6.5
CWE-346 Oct 13, 2026
Azure DevOps Information Disclosure Vulnerability
Origin validation error in Azure DevOps allows an unauthorized attacker to disclose information over a network.
CVE-2026-69721
Medium · 5.5
CWE-125 Oct 13, 2026
Windows iSCSI Information Disclosure Vulnerability
Out-of-bounds read in Windows iSCSI allows an authorized attacker to disclose information locally.