CVE Intelligence
Home / CVEs

CVE Database

Published vulnerabilities with severity, known exploitation and official sources.

Severity
Clear

42.836 result(s)

Export this search: RSS · CSV · STIX
CVE-2026-70017 Medium · 5.5 CWE-843 Oct 13, 2026
Windows Secure Kernel Mode Information Disclosure Vulnerability
Access of resource using incompatible type ('type confusion') in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally.
CVE-2026-70011 Medium · 5.5 CWE-125 Oct 13, 2026
Windows IP Over USB Service Information Disclosure Vulnerability
Out-of-bounds read in Windows IP Over USB Service allows an authorized attacker to disclose information locally.
CVE-2026-70005 Medium · 5.9 CWE-1390 Oct 13, 2026
Active Directory Federation Services (AD FS) Security Feature Bypass Vulnerability
Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-69999 Medium · 5.5 CWE-125 Oct 13, 2026
Windows Update Information Disclosure Vulnerability
Out-of-bounds read in Windows Update allows an authorized attacker to disclose information locally.
CVE-2026-69982 Medium · 5.9 CWE-1390 Oct 13, 2026
Active Directory Federation Services (AD FS) Security Feature Bypass Vulnerability
Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-69979 Medium · 5.5 CWE-424 Oct 13, 2026
Windows AppX Deployment Service Security Feature Bypass Vulnerability
Improper protection of alternate path in Windows AppX Deployment Service allows an authorized attacker to bypass a security feature locally.
CVE-2026-69978 Medium · 5.5 CWE-476 Oct 13, 2026
Microsoft Windows VMSwitch Denial of Service Vulnerability
Null pointer dereference in Windows VMSwitch allows an authorized attacker to deny service locally.
CVE-2026-69974 Medium · 4.7 CWE-125 Oct 13, 2026
Desktop Window Manager Information Disclosure Vulnerability
Out-of-bounds read in Desktop Window Manager allows an authorized attacker to disclose information locally.
CVE-2026-69973 Medium · 6.5 CWE-22 Oct 13, 2026
Windows libarchive Tampering Vulnerability
Improper limitation of a pathname to a restricted directory ('path traversal') in Windows Libarchive allows an unauthorized attacker to perform tampering over a network.
CVE-2026-69971 Medium · 5.5 CWE-863 Oct 13, 2026
Windows Kernel-Mode Drivers Information Disclosure Vulnerability
Incorrect authorization in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.
CVE-2026-69969 Medium · 4.7 CWE-59 Oct 13, 2026
Windows AppX Deployment Service Information Disclosure Vulnerability
Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized attacker to disclose information locally.
CVE-2026-69968 Medium · 6.5 CWE-23 Oct 13, 2026
Windows libarchive Tampering Vulnerability
Relative path traversal in Windows Libarchive allows an unauthorized attacker to perform tampering over a network.
CVE-2026-69967 Medium · 5.5 CWE-125 Oct 13, 2026
Windows Overlay Filter Information Disclosure Vulnerability
Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to disclose information locally.
CVE-2026-69958 Medium · 6.8 CWE-122 Oct 13, 2026
Windows Overlay Filter Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Overlay Filter allows an unauthorized attacker to execute code with a physical attack.
CVE-2026-69955 Medium · 6.5 CWE-125 Oct 13, 2026
Windows Client for NFS Information Disclosure Vulnerability
Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information over a network.
CVE-2026-69954 Medium · 5.5 CWE-126 Oct 13, 2026
Windows Overlay Filter Information Disclosure Vulnerability
Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally.
CVE-2026-69947 Medium · 6.8 CWE-122 Oct 13, 2026
Windows Overlay Filter Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Overlay Filter allows an unauthorized attacker to execute code with a physical attack.
CVE-2026-69940 Medium · 6.5 CWE-125 Oct 13, 2026
Windows Client for NFS Information Disclosure Vulnerability
Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information over a network.
CVE-2026-69922 Medium · 6.5 CWE-125 Oct 13, 2026
Microsoft Office Excel Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-69919 Medium · 5.5 CWE-125 Oct 13, 2026
Windows Cryptographic Services Information Disclosure Vulnerability
Out-of-bounds read in Windows Cryptographic Services allows an authorized attacker to disclose information locally.
CVE-2026-69914 Medium · 5.5 CWE-125 Oct 13, 2026
Windows AppX Deployment Service Information Disclosure Vulnerability
Out-of-bounds read in Windows AppX Deployment Service allows an authorized attacker to disclose information locally.
CVE-2026-69905 Medium · 5.5 CWE-862 Oct 13, 2026
Windows AppX Deployment Service Tampering Vulnerability
Missing authorization in Windows AppX Deployment Service allows an authorized attacker to perform tampering locally.
CVE-2026-69902 Medium · 6.7 CWE-822 Oct 13, 2026
Windows NTFS Remote Code Execution Vulnerability
Untrusted pointer dereference in Windows NTFS allows an authorized attacker to execute code locally.
CVE-2026-69877 Medium · 6.5 CWE-346 Oct 13, 2026
Azure DevOps Information Disclosure Vulnerability
Origin validation error in Azure DevOps allows an unauthorized attacker to disclose information over a network.
CVE-2026-69721 Medium · 5.5 CWE-125 Oct 13, 2026
Windows iSCSI Information Disclosure Vulnerability
Out-of-bounds read in Windows iSCSI allows an authorized attacker to disclose information locally.