High-severity CVEs (page 25)
Page 25 of 100 — high-severity CVEs, newest first, with CVSS scores and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-84016 | High | 7.8 | 2026-10-13 | Out-of-bounds write in Windows EAPHost Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-84014 | High | 7.0 | 2026-10-13 | Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-84013 | High | 7.8 | 2026-10-13 | Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally. |
CVE-2026-84012 | High | 8.1 | 2026-10-13 | Double free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network. |
CVE-2026-84008 | High | 7.5 | 2026-10-13 | Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network. |
CVE-2026-83934 | High | 8.8 | 2026-10-13 | Stack-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network. |
CVE-2026-83932 | High | 7.8 | 2026-10-13 | Heap-based buffer overflow in Windows Group Policy allows an authorized attacker to elevate privileges locally. |
CVE-2026-83931 | High | 7.8 | 2026-10-13 | Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally. |
CVE-2026-83930 | High | 7.0 | 2026-10-13 | Use after free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-83929 | High | 8.8 | 2026-10-13 | Out-of-bounds write in Windows GDI allows an unauthorized attacker to execute code over a network. |
CVE-2026-83928 | High | 8.8 | 2026-10-13 | Out-of-bounds write in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to execute code over a network. |
CVE-2026-83927 | High | 7.8 | 2026-10-13 | Improper link resolution before file access ('link following') in Windows Registry allows an authorized attacker to elevate privileges locally. |
CVE-2026-83924 | High | 7.0 | 2026-10-13 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-83923 | High | 8.8 | 2026-10-13 | Relative path traversal in OpenSSH for Windows allows an unauthorized attacker to execute code over a network. |
CVE-2026-83922 | High | 7.8 | 2026-10-13 | Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally. |
CVE-2026-83921 | High | 7.0 | 2026-10-13 | Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
CVE-2026-83920 | High | 7.8 | 2026-10-13 | Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
CVE-2026-83919 | High | 7.8 | 2026-10-13 | Heap-based buffer overflow in Microsoft Internet Messaging API allows an authorized attacker to execute code locally. |
CVE-2026-83918 | High | 7.8 | 2026-10-13 | Integer overflow or wraparound in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-83917 | High | 7.0 | 2026-10-13 | Use after free in Windows ALPC allows an authorized attacker to elevate privileges locally. |
CVE-2026-83916 | High | 7.0 | 2026-10-13 | Double free in Windows Error Reporting allows an authorized attacker to execute code locally. |
CVE-2026-83915 | High | 7.0 | 2026-10-13 | Use after free in Windows Diagnostic Policy Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-83914 | High | 8.1 | 2026-10-13 | Use after free in Microsoft XML allows an unauthorized attacker to execute code over a network. |
CVE-2026-83913 | High | 7.8 | 2026-10-13 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-83912 | High | 7.8 | 2026-10-13 | Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally. |
CVE-2026-83911 | High | 7.0 | 2026-10-13 | Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally. |
CVE-2026-83908 | High | 7.0 | 2026-10-13 | Release of invalid pointer or reference in RPC Runtime allows an authorized attacker to elevate privileges locally. |
CVE-2026-83903 | High | 7.8 | 2026-10-13 | Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally. |
CVE-2026-83902 | High | 7.8 | 2026-10-13 | Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally. |
CVE-2026-83901 | High | 7.0 | 2026-10-13 | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. |
CVE-2026-83900 | High | 7.0 | 2026-10-13 | Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-83899 | High | 7.0 | 2026-10-13 | Improper privilege management in Windows Installer allows an authorized attacker to elevate privileges locally. |
CVE-2026-83896 | High | 7.8 | 2026-10-13 | Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally. |
CVE-2026-83891 | High | 8.8 | 2026-10-13 | Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
CVE-2026-83889 | High | 8.8 | 2026-10-13 | Release of invalid pointer or reference in DNS Server allows an authorized attacker to execute code over a network. |
CVE-2026-83886 | High | 7.0 | 2026-10-13 | Use after free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-83883 | High | 7.8 | 2026-10-13 | Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. |
CVE-2026-83882 | High | 7.8 | 2026-10-13 | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-83881 | High | 7.8 | 2026-10-13 | Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate privileges locally. |
CVE-2026-83879 | High | 7.0 | 2026-10-13 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Overlay Filter allows an authorized attacker to elevate… |
CVE-2026-83877 | High | 7.8 | 2026-10-13 | Integer overflow or wraparound in HID Parser Library allows an authorized attacker to elevate privileges locally. |
CVE-2026-83876 | High | 7.8 | 2026-10-13 | Use after free in Windows Shell allows an authorized attacker to elevate privileges locally. |
CVE-2026-83874 | High | 8.8 | 2026-10-13 | Heap-based buffer overflow in Windows Event Tracing allows an unauthorized attacker to execute code over a network. |
CVE-2026-83873 | High | 7.8 | 2026-10-13 | Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally. |
CVE-2026-83872 | High | 7.8 | 2026-10-13 | Incorrect conversion between numeric types in Windows TCP/IP allows an authorized attacker to elevate privileges locally. |
CVE-2026-83871 | High | 7.0 | 2026-10-13 | Heap-based buffer overflow in OpenSSH for Windows allows an authorized attacker to elevate privileges locally. |
CVE-2026-83868 | High | 7.0 | 2026-10-13 | Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Bluetooth Driver allows an authorized attacker to elev… |
CVE-2026-83867 | High | 7.8 | 2026-10-13 | Heap-based buffer overflow in Windows Push Notifications allows an authorized attacker to elevate privileges locally. |
CVE-2026-83866 | High | 7.0 | 2026-10-13 | Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. |
CVE-2026-83863 | High | 7.8 | 2026-10-13 | Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally. |
CVE-2026-83861 | High | 7.8 | 2026-10-13 | Heap-based buffer overflow in Windows Remote Desktop Protocol allows an authorized attacker to elevate privileges locally. |
CVE-2026-83860 | High | 7.5 | 2026-10-13 | Stack-based buffer overflow in Windows GDI allows an unauthorized attacker to deny service over a network. |
CVE-2026-83859 | High | 7.8 | 2026-10-13 | Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally. |
CVE-2026-83857 | High | 7.8 | 2026-10-13 | Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. |
CVE-2026-83856 | High | 7.5 | 2026-10-13 | Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network. |
CVE-2026-83855 | High | 7.5 | 2026-10-13 | Integer underflow (wrap or wraparound) in Windows WLAN Service allows an unauthorized attacker to deny service over a network. |
CVE-2026-83853 | High | 7.0 | 2026-10-13 | Use after free in Windows Hello allows an authorized attacker to elevate privileges locally. |
CVE-2026-83852 | High | 7.0 | 2026-10-13 | Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-83851 | High | 8.8 | 2026-10-13 | Heap-based buffer overflow in Windows Partition Management Driver allows an unauthorized attacker to elevate privileges over a network. |
CVE-2026-83850 | High | 7.8 | 2026-10-13 | Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
CVE-2026-83848 | High | 7.8 | 2026-10-13 | Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-83847 | High | 7.8 | 2026-10-13 | Heap-based buffer overflow in Microsoft Account allows an authorized attacker to elevate privileges locally. |
CVE-2026-83846 | High | 7.0 | 2026-10-13 | Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally. |
CVE-2026-83845 | High | 8.4 | 2026-10-13 | Improper privilege management in Windows Internet (wininet.dll) allows an authorized attacker to perform spoofing locally. |
CVE-2026-83844 | High | 8.1 | 2026-10-13 | Out-of-bounds read in Windows Paint allows an unauthorized attacker to execute code over a network. |
CVE-2026-83843 | High | 7.5 | 2026-10-13 | Out-of-bounds read in Windows Internet Key Exchange (IKE) Protocol allows an unauthorized attacker to deny service over a network. |
CVE-2026-83842 | High | 7.0 | 2026-10-13 | Double free in Windows TCP/IP allows an authorized attacker to elevate privileges locally. |
CVE-2026-83841 | High | 7.0 | 2026-10-13 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K allows an authorized attacker to elevate privileg… |
CVE-2026-83840 | High | 7.8 | 2026-10-13 | Weak authentication in Windows Error Reporting allows an authorized attacker to elevate privileges locally. |
CVE-2026-83839 | High | 7.0 | 2026-10-13 | Time-of-check time-of-use (toctou) race condition in Windows Hyper-V allows an authorized attacker to elevate privileges locally. |
CVE-2026-83838 | High | 8.0 | 2026-10-13 | Integer underflow (wrap or wraparound) in Windows Bluetooth A2DP driver allows an authorized attacker to elevate privileges over an adjacent network. |
CVE-2026-83837 | High | 7.8 | 2026-10-13 | Improper access control in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally. |
CVE-2026-83836 | High | 7.8 | 2026-10-13 | Heap-based buffer overflow in Windows Event Tracing allows an unauthorized attacker to execute code locally. |
CVE-2026-83834 | High | 7.0 | 2026-10-13 | Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally. |
CVE-2026-83833 | High | 7.8 | 2026-10-13 | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-83832 | High | 7.8 | 2026-10-13 | Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally. |
CVE-2026-83830 | High | 7.8 | 2026-10-13 | Heap-based buffer overflow in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-83829 | High | 7.8 | 2026-10-13 | Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
CVE-2026-83828 | High | 7.8 | 2026-10-13 | Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally. |
CVE-2026-83827 | High | 7.0 | 2026-10-13 | Heap-based buffer overflow in Windows Bluetooth Port Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-83826 | High | 7.8 | 2026-10-13 | Untrusted pointer dereference in Windows Error Reporting allows an authorized attacker to elevate privileges locally. |
CVE-2026-83797 | High | 8.8 | 2026-10-13 | Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute code over a network. |
CVE-2026-83796 | High | 7.8 | 2026-10-13 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-83795 | High | 7.5 | 2026-10-13 | Heap-based buffer overflow in Windows IKE Extension allows an unauthorized attacker to deny service over a network. |
CVE-2026-83793 | High | 7.0 | 2026-10-13 | Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges local… |
CVE-2026-83792 | High | 7.8 | 2026-10-13 | Incorrect authorization in Windows Device Install Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-83791 | High | 7.8 | 2026-10-13 | Improper authorization in Windows Virtual Input allows an authorized attacker to elevate privileges locally. |
CVE-2026-83790 | High | 7.0 | 2026-10-13 | Use after free in Windows Hello allows an authorized attacker to elevate privileges locally. |
CVE-2026-83789 | High | 8.8 | 2026-10-13 | Heap-based buffer overflow in Windows SMB Client allows an unauthorized attacker to elevate privileges over a network. |
CVE-2026-83785 | High | 7.0 | 2026-10-13 | Use after free in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-83784 | High | 8.8 | 2026-10-13 | Absolute path traversal in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges over a network. |
CVE-2026-83783 | High | 7.8 | 2026-10-13 | Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally. |
CVE-2026-83781 | High | 7.8 | 2026-10-13 | Improper null termination in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-83779 | High | 7.8 | 2026-10-13 | Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. |
CVE-2026-83778 | High | 8.8 | 2026-10-13 | Heap-based buffer overflow in Microsoft Internet Messaging API allows an unauthorized attacker to execute code over a network. |
CVE-2026-83777 | High | 8.8 | 2026-10-13 | Heap-based buffer overflow in Windows Bluetooth Service allows an unauthorized attacker to elevate privileges over an adjacent network. |
CVE-2026-83775 | High | 7.0 | 2026-10-13 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privi… |
CVE-2026-83771 | High | 8.8 | 2026-10-13 | Use after free in Windows Camera Frame Server Monitor allows an unauthorized attacker to elevate privileges over an adjacent network. |
CVE-2026-83769 | High | 7.8 | 2026-10-13 | Use after free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally. |
CVE-2026-83768 | High | 7.8 | 2026-10-13 | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. |