Threat database

2,276 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
High	8.8	EPSS 0.9%	CVE-2026-108463Windows 11 Version 24H2 · Improper Resolution of Path Equivalence High8.8EPSS 0.9%2026-10-13CVE Database V5CVE-2026-108463 Improper resolution of path equivalence in Windows SmartScreen allows an unauthorized attacker to bypass a security feature over a network. EPSS 0.9%Vulnerability Microsoft #cwe-41	CVE Database V5	2026-10-13
High	8.8	EPSS 0.3%	CVE-2026-108471Windows 10 Version 1809 · Incomplete List of Disallowed Inputs High8.8EPSS 0.3%2026-10-13CVE Database V5CVE-2026-108471 Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally. EPSS 0.3%Vulnerability Microsoft #cwe-822 #cwe-184	CVE Database V5	2026-10-13
High	7.8	EPSS 0.3%	CVE-2026-108136Windows 10 Version 1607 · Use After Free High7.8EPSS 0.3%2026-10-13CVE Database V5CVE-2026-108136 Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. EPSS 0.3%Vulnerability Microsoft #cwe-416	CVE Database V5	2026-10-13
High	7.0	EPSS 0.3%	CVE-2026-108135Windows 10 Version 21H2 · Improper Link Resolution Before File Access ('Link Following') in Microsoft Windows 10… High7.0EPSS 0.3%2026-10-13CVE Database V5CVE-2026-108135 Improper link resolution before file access ('link following') in Windows Backup Engine allows an authorized attacker to elevate privileges locally. EPSS 0.3%Vulnerability Microsoft #cwe-59	CVE Database V5	2026-10-13
High	7.0	EPSS 0.3%	CVE-2026-108134Windows 11 Version 24H2 · Use After Free High7.0EPSS 0.3%2026-10-13CVE Database V5CVE-2026-108134 Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally. EPSS 0.3%Vulnerability Microsoft #cwe-416	CVE Database V5	2026-10-13
High	7.8	EPSS 0.3%	CVE-2026-108133Windows Server 2022 · Release of Invalid Pointer or Reference High7.8EPSS 0.3%2026-10-13CVE Database V5CVE-2026-108133 Release of invalid pointer or reference in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally. EPSS 0.3%Vulnerability Microsoft #cwe-763	CVE Database V5	2026-10-13
High	7.0	EPSS 0.2%	CVE-2026-108132Windows 10 Version 1607 · Double Free High7.0EPSS 0.2%2026-10-13CVE Database V5CVE-2026-108132 Double free in Windows Kerberos allows an authorized attacker to elevate privileges locally. EPSS 0.2%Vulnerability Microsoft #cwe-415	CVE Database V5	2026-10-13
High	7.5	EPSS 0.7%	CVE-2026-108131Windows 10 Version 1607 · Improper Certificate Validation High7.5EPSS 0.7%2026-10-13CVE Database V5CVE-2026-108131 No cwe for this issue in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network. EPSS 0.7%Vulnerability Microsoft #cwe-295 #cwe-290	CVE Database V5	2026-10-13
High	7.8	EPSS 0.3%	CVE-2026-108130Windows 11 Version 24H2 · Heap-based Buffer Overflow High7.8EPSS 0.3%2026-10-13CVE Database V5CVE-2026-108130 Heap-based buffer overflow in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally. EPSS 0.3%Vulnerability Microsoft #cwe-122	CVE Database V5	2026-10-13
Medium	6.5	EPSS 1.0%	CVE-2026-108129Windows 10 Version 1607 · Out-of-bounds Read Medium6.5EPSS 1.0%2026-10-13CVE Database V5CVE-2026-108129 Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. EPSS 1.0%Vulnerability Microsoft #cwe-125	CVE Database V5	2026-10-13
Medium	6.5	EPSS 1.0%	CVE-2026-108128Windows 10 Version 1607 · Out-of-bounds Read Medium6.5EPSS 1.0%2026-10-13CVE Database V5CVE-2026-108128 Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. EPSS 1.0%Vulnerability Microsoft #cwe-125	CVE Database V5	2026-10-13
Medium	6.5	EPSS 1.0%	CVE-2026-108127Windows 10 Version 1607 · Out-of-bounds Read Medium6.5EPSS 1.0%2026-10-13CVE Database V5CVE-2026-108127 Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. EPSS 1.0%Vulnerability Microsoft #cwe-125	CVE Database V5	2026-10-13
Medium	6.5	EPSS 0.7%	CVE-2026-97844Windows 10 Version 1607 · Out-of-bounds Read Medium6.5EPSS 0.7%2026-10-13CVE Database V5CVE-2026-97844 Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. EPSS 0.7%Vulnerability Microsoft #cwe-125	CVE Database V5	2026-10-13
Medium	6.5	EPSS 0.7%	CVE-2026-97843Windows 10 Version 1607 · Out-of-bounds Read Medium6.5EPSS 0.7%2026-10-13CVE Database V5CVE-2026-97843 Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. EPSS 0.7%Vulnerability Microsoft #cwe-125	CVE Database V5	2026-10-13
Medium	6.5	EPSS 0.6%	CVE-2026-97842Windows 10 Version 1607 · Out-of-bounds Read Medium6.5EPSS 0.6%2026-10-13CVE Database V5CVE-2026-97842 Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. EPSS 0.6%Vulnerability Microsoft #cwe-125	CVE Database V5	2026-10-13
Medium	6.5	EPSS 0.7%	CVE-2026-97841Windows 10 Version 1607 · Out-of-bounds Read Medium6.5EPSS 0.7%2026-10-13CVE Database V5CVE-2026-97841 Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. EPSS 0.7%Vulnerability Microsoft #cwe-125	CVE Database V5	2026-10-13
Medium	6.5	EPSS 0.7%	CVE-2026-97840Windows 10 Version 1607 · Out-of-bounds Read Medium6.5EPSS 0.7%2026-10-13CVE Database V5CVE-2026-97840 Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. EPSS 0.7%Vulnerability Microsoft #cwe-125	CVE Database V5	2026-10-13
Medium	6.5	EPSS 0.7%	CVE-2026-97839Windows 10 Version 1607 · Out-of-bounds Read Medium6.5EPSS 0.7%2026-10-13CVE Database V5CVE-2026-97839 Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. EPSS 0.7%Vulnerability Microsoft #cwe-125	CVE Database V5	2026-10-13
Medium	6.5	EPSS 0.7%	CVE-2026-97838Windows 10 Version 1607 · Out-of-bounds Read Medium6.5EPSS 0.7%2026-10-13CVE Database V5CVE-2026-97838 Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. EPSS 0.7%Vulnerability Microsoft #cwe-125	CVE Database V5	2026-10-13
Medium	6.5	EPSS 0.7%	CVE-2026-97837Windows 10 Version 1607 · Out-of-bounds Read Medium6.5EPSS 0.7%2026-10-13CVE Database V5CVE-2026-97837 Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. EPSS 0.7%Vulnerability Microsoft #cwe-125	CVE Database V5	2026-10-13

Showing 301–320 of 2,276 results