Vulnerabilities

Summary — last 7 days

New vulnerabilities3,222▲ 222 vs. last week

Critical / high1,465▲ 132 vs. last week

New active exploitation (KEV)7▼ 3 vs. last week

Unscored (no CVSS)511▼ 31 vs. last week

3,126 results, sorted by published date (most recent first)

CVE	Status	Severity	EPSS	Active exploitation	Affected technologies	Published ▼	Modified	Description
CVE-2026-85880	Analyzed	High (7.8)	3.6%	⚠ Active exploitation	Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2+4	9/8/2026	9/24/2026	Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally.
CVE-2026-85360	Analyzed	High (7)	0.26%	—	Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2+9	9/8/2026	9/24/2026	Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-84001	Analyzed	High (7.5)	1.2%	—	Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2+9	9/8/2026	9/24/2026	Out-of-bounds read in Windows Key Distribution Center allows an unauthorized attacker to deny service over a network.
CVE-2026-84000	Analyzed	High (7.8)	0.33%	—	Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2+9	9/8/2026	9/24/2026	Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to execute code locally.
CVE-2026-83998	Analyzed	High (8.8)	0.82%	—	Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2+8	9/8/2026	9/23/2026	Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
CVE-2026-83996	Analyzed	High (8.8)	0.33%	—	Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2+9	9/8/2026	9/24/2026	Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
CVE-2026-83995	Analyzed	High (7.8)	0.33%	—	Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2+9	9/8/2026	9/24/2026	Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVE-2026-83992	Analyzed	High (8.8)	0.82%	—	Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2+9	9/8/2026	9/24/2026	Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
CVE-2026-83991	Analyzed	Medium (5.5)	0.30%	—	Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2 Microsoft Windows 11 23h2+6	9/8/2026	9/9/2026	Missing authentication for critical function in Windows Cloud Files Mini Filter Driver allows an authorized attacker to perform tampering locally.
CVE-2026-83989	Analyzed	High (7.5)	1.2%	—	Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2+9	9/8/2026	9/24/2026	Out-of-bounds read in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to deny service over a network.
CVE-2026-83988	Analyzed	High (7.8)	0.33%	—	Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2+8	9/8/2026	9/11/2026	Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83987	Analyzed	High (7.8)	0.33%	—	Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2+8	9/8/2026	9/12/2026	Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83986	Analyzed	High (7.8)	0.33%	—	Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2+8	9/8/2026	9/9/2026	Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83985	Analyzed	High (7.8)	0.33%	—	Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2+8	9/8/2026	9/12/2026	Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83983	Analyzed	High (7.8)	0.33%	—	Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2+8	9/8/2026	9/12/2026	Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83982	Analyzed	High (7.8)	0.33%	—	Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2+8	9/8/2026	9/12/2026	Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83981	Analyzed	High (7.8)	0.33%	—	Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2+8	9/8/2026	9/12/2026	Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83980	Analyzed	High (7.8)	0.33%	—	Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2+8	9/8/2026	9/12/2026	Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83979	Analyzed	High (7.8)	0.33%	—	Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2+8	9/8/2026	9/10/2026	Use after free in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83978	Analyzed	High (7.8)	0.33%	—	Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2+8	9/8/2026	9/15/2026	Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83977	Analyzed	High (7.8)	0.33%	—	Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2+8	9/8/2026	9/12/2026	Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83976	Analyzed	High (7.8)	0.33%	—	Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2+8	9/8/2026	9/10/2026	Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83975	Analyzed	High (7.8)	0.33%	—	Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2+8	9/8/2026	9/9/2026	Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83974	Analyzed	High (7.8)	0.33%	—	Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2+8	9/8/2026	9/10/2026	Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83973	Analyzed	High (7.8)	0.33%	—	Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2+8	9/8/2026	9/12/2026	Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.