Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-70027 | high | 7.8 | No | Heap-based buffer overflow in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally. | 2026-10-16 |
| CVE-2026-70026 | high | 7.0 | No | Use after free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally. | 2026-10-16 |
| CVE-2026-70025 | medium | 6.5 | No | Use after free in Windows Netlogon allows an authorized attacker to deny service over a network. | 2026-10-16 |
| CVE-2026-70024 | critical | 9.8 | No | Stack-based buffer overflow in Windows Internet Information Services allows an unauthorized attacker to execute code over a network. | 2026-10-16 |
| CVE-2026-70017 | medium | 5.5 | No | Access of resource using incompatible type ('type confusion') in Windows Secure Kernel Mode allows an authorized attacker to disclose inform... | 2026-10-16 |
| CVE-2026-70015 | high | 7.8 | No | Use after free in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally. | 2026-10-16 |
| CVE-2026-70014 | high | 7.5 | No | Use after free in Windows Cryptographic Services allows an authorized attacker to execute code over a network. | 2026-10-16 |
| CVE-2026-69959 | high | 7.8 | No | Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to execute code locally. | 2026-10-16 |
| CVE-2026-69958 | medium | 6.8 | No | Heap-based buffer overflow in Windows Overlay Filter allows an unauthorized attacker to execute code with a physical attack. | 2026-10-16 |
| CVE-2026-69955 | medium | 6.5 | No | Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information over a network. | 2026-10-16 |
| CVE-2026-85371 | high | 8.1 | No | Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network. | 2026-10-16 |
| CVE-2026-69957 | high | 7.8 | No | Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. | 2026-10-16 |
| CVE-2026-85365 | high | 7.0 | No | Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally. | 2026-10-16 |
| CVE-2026-69954 | medium | 5.5 | No | Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally. | 2026-10-16 |
| CVE-2026-69952 | high | 7.8 | No | Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. | 2026-10-16 |
| CVE-2026-69953 | high | 7.8 | No | Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. | 2026-10-16 |
| CVE-2026-96919 | high | 7.0 | No | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. | 2026-10-16 |
| CVE-2026-96918 | high | 7.8 | No | Improper access control in Windows NTFS allows an authorized attacker to elevate privileges locally. | 2026-10-16 |
| CVE-2026-85337 | medium | 6.5 | No | Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network. | 2026-10-16 |
| CVE-2026-96917 | high | 8.8 | No | Heap-based buffer overflow in Windows PCI Bus Driver allows an authorized attacker to elevate privileges locally. | 2026-10-16 |