Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium6.5Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.EPSS 0.7%Oct 13, 2026
- Medium6.5Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.EPSS 0.7%Oct 13, 2026
- Medium5.3Weak authentication in Windows Kernel allows an authorized attacker to bypass a security feature over a network.Oct 13, 2026
- Medium5.5Improper verification of cryptographic signature in Windows Update Stack allows an authorized attacker to perform spoofing locally.EPSS 0.2%Oct 13, 2026
- Medium5.5Insufficient verification of data authenticity in Windows DHCP Server allows an authorized attacker to bypass a security feature locally.EPSS 0.3%Oct 13, 2026
- Medium6.8Integer overflow or wraparound in Windows Kernel Mode Driver allows an unauthorized attacker to elevate privileges with a physical attack.Oct 13, 2026
- Medium6.4Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Security Center allows an authorized attacker to elevate privileges locally.Oct 13, 2026
- Critical9.8Heap-based buffer overflow in Windows Rich Text Edit Control allows an unauthorized attacker to execute code over a network.Oct 13, 2026
- High7.5Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network.Oct 13, 2026
- High7.5Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to deny service over a network.Oct 13, 2026
- High8.1Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.Oct 13, 2026
- High8.4Rovr through 0.10.3 on Windows contains an OS command injection vulnerability that allows attackers to execute commands by crafting malicious file names.EPSS 1.1%Oct 13, 2026
- High8.8Heap-based buffer overflow in Windows Media Video Decoder allows an unauthorized attacker to execute code over a network.EPSS 0.8%Oct 13, 2026
- Critical9.8Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.Oct 13, 2026
- Critical9.8Out-of-bounds write in Windows iSCSI allows an unauthorized attacker to execute code over a network.Oct 13, 2026
- UnknownCVE-2026-69639 is listed by NCSC-2026-0423 [1.00] [M/H] Kwetsbaarheden verholpen in Microsoft Windows.Oct 13, 2026
- UnknownCVE-2026-69634 is listed by NCSC-2026-0423 [1.00] [M/H] Kwetsbaarheden verholpen in Microsoft Windows.Oct 13, 2026
- UnknownCVE-2026-105010 is listed by NCSC-2026-0423 [1.00] [M/H] Kwetsbaarheden verholpen in Microsoft Windows.Oct 13, 2026
- UnknownCVE-2026-105008 is listed by NCSC-2026-0423 [1.00] [M/H] Kwetsbaarheden verholpen in Microsoft Windows.Oct 13, 2026
- UnknownCVE-2026-102210 is listed by NCSC-2026-0423 [1.00] [M/H] Kwetsbaarheden verholpen in Microsoft Windows.Oct 13, 2026
- UnknownCVE-2026-100222 is listed by NCSC-2026-0423 [1.00] [M/H] Kwetsbaarheden verholpen in Microsoft Windows.Oct 13, 2026
- UnknownCVE-2026-100219 is listed by NCSC-2026-0423 [1.00] [M/H] Kwetsbaarheden verholpen in Microsoft Windows.Oct 13, 2026
- UnknownCVE-2026-100202 is listed by NCSC-2026-0423 [1.00] [M/H] Kwetsbaarheden verholpen in Microsoft Windows.Oct 13, 2026
- High7.8Hyland Desktop Host for Windows before 25.1.1 is vulnerable to local privilege escalation.EPSS 0.1%Oct 13, 2026
- Medium6.9Authorization bypass through User-Controlled key vulnerability in HYPR Passwordless on Windows allows Privilege Escalation.EPSS 0.1%Oct 13, 2026