Vulnerability feed

CVE and vendor PSIRT advisories from 13 sources, last 30 days. Updated hourly, last run Oct 26 02:05 UTC

Critical in the last 24 hours

1603 in 30 days

Newly known exploited

In the last 24 hours, CISA KEV and vendor reports

Sources checked

Every hour, see the list

New in the last 24 hours

144-76% vs 7-day avg of 597

2 critical, 38 high, 59 medium, 25 low

Expand	Severity	Score	Advisory	Title	Source	Published
	High	7.0	CVE-2026-97812	Double free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally. MicrosoftMicrosoft Windows 11 version 23H2, Microsoft Windows 11 Version 24H2, Microsoft Windows 11 Version 25H2, Microsoft Windows 11 version 26H1, Microsoft Windows 11 Version 26H2, Microsoft Windows Server 2025, Microsoft Windows Server 2025 (Server Core installation), Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 22H2, Microsoft Windows 10 21H2, Microsoft Windows 10 22H2	NVD	Oct 13 19:22 UTC
CVE-2026-97812Double free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally. From the advisory Double free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally. Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Local Attack complexity High Privileges required Low User interaction None Scope Unchanged CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Affects Microsoft Microsoft Windows 11 version 23H2 Microsoft Windows 11 Version 24H2 Microsoft Windows 11 Version 25H2 Microsoft Windows 11 version 26H1 Microsoft Windows 11 Version 26H2 Microsoft Windows Server 2025 Microsoft Windows Server 2025 (Server Core installation)Microsoft Windows 10 Version 21H2 Microsoft Windows 10 Version 22H2 Microsoft Windows 10 21H2 Microsoft Windows 10 22H2 NIST National Vulnerability DatabasePublished Oct 13, 2026 19:22 UTC Read the advisory
	High	7.8	CVE-2026-97798	Improper neutralization of argument delimiters in a command ('argument injection') in Windows Error Reporting allows an authorized attacker to elevate privileges locally. MicrosoftMicrosoft Windows 11 version 23H2, Microsoft Windows 11 Version 24H2, Microsoft Windows 11 Version 25H2, Microsoft Windows 11 version 26H1, Microsoft Windows 11 Version 26H2, Microsoft Windows Server 2025, Microsoft Windows Server 2025 (Server Core installation), Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 22H2, Microsoft Windows Server 2022, Microsoft Windows 10 21H2	NVD	Oct 13 19:22 UTC
CVE-2026-97798Improper neutralization of argument delimiters in a command ('argument injection') in Windows Error Reporting allows an authorized attacker to elevate privileges locally. From the advisory Improper neutralization of argument delimiters in a command ('argument injection') in Windows Error Reporting allows an authorized attacker to elevate privileges locally. Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Local Attack complexity Low Privileges required Low User interaction None Scope Unchanged CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affects Microsoft Microsoft Windows 11 version 23H2 Microsoft Windows 11 Version 24H2 Microsoft Windows 11 Version 25H2 Microsoft Windows 11 version 26H1 Microsoft Windows 11 Version 26H2 Microsoft Windows Server 2025 Microsoft Windows Server 2025 (Server Core installation)Microsoft Windows 10 Version 21H2 Microsoft Windows 10 Version 22H2 Microsoft Windows Server 2022 Microsoft Windows 10 21H2 NIST National Vulnerability DatabasePublished Oct 13, 2026 19:22 UTC Read the advisory
	High	7.0	CVE-2026-96937	Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. MicrosoftMicrosoft Windows 11 version 23H2, Microsoft Windows 11 Version 24H2, Microsoft Windows 11 Version 25H2, Microsoft Windows 11 version 26H1, Microsoft Windows 11 Version 26H2, Microsoft Windows Server 2025, Microsoft Windows Server 2025 (Server Core installation), Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 22H2, Microsoft Windows Server 2022, Microsoft Windows 10 21H2	NVD	Oct 13 19:22 UTC
CVE-2026-96937Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. From the advisory Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Local Attack complexity High Privileges required Low User interaction None Scope Unchanged CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Affects Microsoft Microsoft Windows 11 version 23H2 Microsoft Windows 11 Version 24H2 Microsoft Windows 11 Version 25H2 Microsoft Windows 11 version 26H1 Microsoft Windows 11 Version 26H2 Microsoft Windows Server 2025 Microsoft Windows Server 2025 (Server Core installation)Microsoft Windows 10 Version 21H2 Microsoft Windows 10 Version 22H2 Microsoft Windows Server 2022 Microsoft Windows 10 21H2 NIST National Vulnerability DatabasePublished Oct 13, 2026 19:22 UTC Read the advisory
	Medium	5.5	CVE-2026-96848	Buffer over-read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. MicrosoftMicrosoft Windows 11 version 23H2, Microsoft Windows Server 2025, Microsoft Windows Server 2025 (Server Core installation), Microsoft Windows 10 Version 1809, Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 22H2, Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows Server 2022, Microsoft Windows 10 1809, Microsoft Windows 10 21H2	NVD	Oct 13 19:21 UTC
CVE-2026-96848Buffer over-read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. From the advisory Buffer over-read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. Impact if exploited ConfidentialityHigh IntegrityNone AvailabilityNone How it is exploited Attack vector Local Attack complexity Low Privileges required Low User interaction None Scope Unchanged CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N Affects Microsoft Microsoft Windows 11 version 23H2 Microsoft Windows Server 2025 Microsoft Windows Server 2025 (Server Core installation)Microsoft Windows 10 Version 1809 Microsoft Windows 10 Version 21H2 Microsoft Windows 10 Version 22H2 Microsoft Windows Server 2019 Microsoft Windows Server 2019 (Server Core installation)Microsoft Windows Server 2022 Microsoft Windows 10 1809 Microsoft Windows 10 21H2 NIST National Vulnerability DatabasePublished Oct 13, 2026 19:21 UTC Read the advisory
	High	7.0	CVE-2026-96323	Use after free in Windows Update allows an authorized attacker to elevate privileges locally. MicrosoftMicrosoft Windows 11 version 23H2, Microsoft Windows 11 Version 24H2, Microsoft Windows 11 Version 25H2, Microsoft Windows 11 version 26H1, Microsoft Windows 11 Version 26H2, Microsoft Windows Server 2025, Microsoft Windows Server 2025 (Server Core installation), Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 22H2, Microsoft Windows Server 2022, Microsoft Windows 10 21H2	NVD	Oct 13 19:21 UTC
CVE-2026-96323Use after free in Windows Update allows an authorized attacker to elevate privileges locally. From the advisory Use after free in Windows Update allows an authorized attacker to elevate privileges locally. Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Local Attack complexity High Privileges required Low User interaction None Scope Unchanged CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Affects Microsoft Microsoft Windows 11 version 23H2 Microsoft Windows 11 Version 24H2 Microsoft Windows 11 Version 25H2 Microsoft Windows 11 version 26H1 Microsoft Windows 11 Version 26H2 Microsoft Windows Server 2025 Microsoft Windows Server 2025 (Server Core installation)Microsoft Windows 10 Version 21H2 Microsoft Windows 10 Version 22H2 Microsoft Windows Server 2022 Microsoft Windows 10 21H2 NIST National Vulnerability DatabasePublished Oct 13, 2026 19:21 UTC Read the advisory
	Medium	5.5	CVE-2026-96321	Out-of-bounds read in Remote Desktop Display Driver allows an authorized attacker to disclose information locally. MicrosoftMicrosoft Windows 11 version 23H2, Microsoft Windows 11 Version 24H2, Microsoft Windows 11 Version 25H2, Microsoft Windows 11 version 26H1, Microsoft Windows 11 Version 26H2, Microsoft Windows Server 2025, Microsoft Windows Server 2025 (Server Core installation), Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 22H2, Microsoft Windows Server 2022, Microsoft Windows 10 21H2	NVD	Oct 13 19:21 UTC
CVE-2026-96321Out-of-bounds read in Remote Desktop Display Driver allows an authorized attacker to disclose information locally. From the advisory Out-of-bounds read in Remote Desktop Display Driver allows an authorized attacker to disclose information locally. Impact if exploited ConfidentialityHigh IntegrityNone AvailabilityNone How it is exploited Attack vector Local Attack complexity Low Privileges required Low User interaction None Scope Unchanged CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N Affects Microsoft Microsoft Windows 11 version 23H2 Microsoft Windows 11 Version 24H2 Microsoft Windows 11 Version 25H2 Microsoft Windows 11 version 26H1 Microsoft Windows 11 Version 26H2 Microsoft Windows Server 2025 Microsoft Windows Server 2025 (Server Core installation)Microsoft Windows 10 Version 21H2 Microsoft Windows 10 Version 22H2 Microsoft Windows Server 2022 Microsoft Windows 10 21H2 NIST National Vulnerability DatabasePublished Oct 13, 2026 19:21 UTC Read the advisory
	High	7.0	CVE-2026-96319	Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. MicrosoftMicrosoft Windows 11 version 23H2, Microsoft Windows 11 Version 24H2, Microsoft Windows 11 Version 25H2, Microsoft Windows 11 version 26H1, Microsoft Windows 11 Version 26H2, Microsoft Windows Server 2025, Microsoft Windows Server 2025 (Server Core installation), Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 22H2, Microsoft Windows Server 2022, Microsoft Windows 10 21H2	NVD	Oct 13 19:21 UTC
CVE-2026-96319Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. From the advisory Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Local Attack complexity High Privileges required Low User interaction None Scope Unchanged CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Affects Microsoft Microsoft Windows 11 version 23H2 Microsoft Windows 11 Version 24H2 Microsoft Windows 11 Version 25H2 Microsoft Windows 11 version 26H1 Microsoft Windows 11 Version 26H2 Microsoft Windows Server 2025 Microsoft Windows Server 2025 (Server Core installation)Microsoft Windows 10 Version 21H2 Microsoft Windows 10 Version 22H2 Microsoft Windows Server 2022 Microsoft Windows 10 21H2 NIST National Vulnerability DatabasePublished Oct 13, 2026 19:21 UTC Read the advisory
	High	7.0	CVE-2026-96310	Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. MicrosoftMicrosoft Windows 11 version 23H2, Microsoft Windows 11 Version 24H2, Microsoft Windows 11 Version 25H2, Microsoft Windows 11 version 26H1, Microsoft Windows 11 Version 26H2, Microsoft Windows Server 2025, Microsoft Windows Server 2025 (Server Core installation), Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 22H2, Microsoft Windows Server 2022, Microsoft Windows 10 21H2	NVD	Oct 13 19:21 UTC
CVE-2026-96310Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. From the advisory Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Local Attack complexity High Privileges required Low User interaction None Scope Unchanged CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Affects Microsoft Microsoft Windows 11 version 23H2 Microsoft Windows 11 Version 24H2 Microsoft Windows 11 Version 25H2 Microsoft Windows 11 version 26H1 Microsoft Windows 11 Version 26H2 Microsoft Windows Server 2025 Microsoft Windows Server 2025 (Server Core installation)Microsoft Windows 10 Version 21H2 Microsoft Windows 10 Version 22H2 Microsoft Windows Server 2022 Microsoft Windows 10 21H2 NIST National Vulnerability DatabasePublished Oct 13, 2026 19:21 UTC Read the advisory
	High	7.8	CVE-2026-96309	Use after free in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally. MicrosoftMicrosoft Windows 11 version 23H2, Microsoft Windows 11 Version 24H2, Microsoft Windows 11 Version 25H2, Microsoft Windows 11 version 26H1, Microsoft Windows 11 Version 26H2, Microsoft Windows Server 2025, Microsoft Windows Server 2025 (Server Core installation), Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 22H2, Microsoft Windows Server 2022, Microsoft Windows 10 21H2	NVD	Oct 13 19:21 UTC
CVE-2026-96309Use after free in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally. From the advisory Use after free in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally. Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Local Attack complexity Low Privileges required Low User interaction None Scope Unchanged CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affects Microsoft Microsoft Windows 11 version 23H2 Microsoft Windows 11 Version 24H2 Microsoft Windows 11 Version 25H2 Microsoft Windows 11 version 26H1 Microsoft Windows 11 Version 26H2 Microsoft Windows Server 2025 Microsoft Windows Server 2025 (Server Core installation)Microsoft Windows 10 Version 21H2 Microsoft Windows 10 Version 22H2 Microsoft Windows Server 2022 Microsoft Windows 10 21H2 NIST National Vulnerability DatabasePublished Oct 13, 2026 19:21 UTC Read the advisory
	High	7.0	CVE-2026-96304	Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. MicrosoftMicrosoft Windows 11 version 23H2, Microsoft Windows 11 Version 24H2, Microsoft Windows 11 Version 25H2, Microsoft Windows 11 version 26H1, Microsoft Windows 11 Version 26H2, Microsoft Windows Server 2025, Microsoft Windows Server 2025 (Server Core installation), Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 22H2, Microsoft Windows Server 2022, Microsoft Windows 10 21H2	NVD	Oct 13 19:21 UTC
CVE-2026-96304Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. From the advisory Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Local Attack complexity High Privileges required Low User interaction None Scope Unchanged CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Affects Microsoft Microsoft Windows 11 version 23H2 Microsoft Windows 11 Version 24H2 Microsoft Windows 11 Version 25H2 Microsoft Windows 11 version 26H1 Microsoft Windows 11 Version 26H2 Microsoft Windows Server 2025 Microsoft Windows Server 2025 (Server Core installation)Microsoft Windows 10 Version 21H2 Microsoft Windows 10 Version 22H2 Microsoft Windows Server 2022 Microsoft Windows 10 21H2 NIST National Vulnerability DatabasePublished Oct 13, 2026 19:21 UTC Read the advisory
	High	7.0	CVE-2026-96301	Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. MicrosoftMicrosoft Windows 11 version 23H2, Microsoft Windows 11 Version 24H2, Microsoft Windows 11 Version 25H2, Microsoft Windows 11 version 26H1, Microsoft Windows 11 Version 26H2, Microsoft Windows Server 2025, Microsoft Windows Server 2025 (Server Core installation), Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 22H2, Microsoft Windows Server 2022, Microsoft Windows 10 21H2	NVD	Oct 13 19:21 UTC
CVE-2026-96301Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. From the advisory Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Local Attack complexity High Privileges required Low User interaction None Scope Unchanged CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Affects Microsoft Microsoft Windows 11 version 23H2 Microsoft Windows 11 Version 24H2 Microsoft Windows 11 Version 25H2 Microsoft Windows 11 version 26H1 Microsoft Windows 11 Version 26H2 Microsoft Windows Server 2025 Microsoft Windows Server 2025 (Server Core installation)Microsoft Windows 10 Version 21H2 Microsoft Windows 10 Version 22H2 Microsoft Windows Server 2022 Microsoft Windows 10 21H2 NIST National Vulnerability DatabasePublished Oct 13, 2026 19:21 UTC Read the advisory
	High	7.0	CVE-2026-96254	Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. MicrosoftMicrosoft Windows 11 version 23H2, Microsoft Windows 11 Version 24H2, Microsoft Windows 11 Version 25H2, Microsoft Windows 11 version 26H1, Microsoft Windows 11 Version 26H2, Microsoft Windows Server 2025, Microsoft Windows Server 2025 (Server Core installation), Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 22H2, Microsoft Windows Server 2022, Microsoft Windows 10 21H2	NVD	Oct 13 19:21 UTC
CVE-2026-96254Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. From the advisory Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Local Attack complexity High Privileges required Low User interaction None Scope Unchanged CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Affects Microsoft Microsoft Windows 11 version 23H2 Microsoft Windows 11 Version 24H2 Microsoft Windows 11 Version 25H2 Microsoft Windows 11 version 26H1 Microsoft Windows 11 Version 26H2 Microsoft Windows Server 2025 Microsoft Windows Server 2025 (Server Core installation)Microsoft Windows 10 Version 21H2 Microsoft Windows 10 Version 22H2 Microsoft Windows Server 2022 Microsoft Windows 10 21H2 NIST National Vulnerability DatabasePublished Oct 13, 2026 19:21 UTC Read the advisory
	High	7.0	CVE-2026-96253	Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. MicrosoftMicrosoft Windows 11 version 23H2, Microsoft Windows 11 Version 24H2, Microsoft Windows 11 Version 25H2, Microsoft Windows 11 version 26H1, Microsoft Windows 11 Version 26H2, Microsoft Windows Server 2025, Microsoft Windows Server 2025 (Server Core installation), Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 22H2, Microsoft Windows Server 2022, Microsoft Windows 10 21H2	NVD	Oct 13 19:21 UTC
CVE-2026-96253Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. From the advisory Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Local Attack complexity High Privileges required Low User interaction None Scope Unchanged CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Affects Microsoft Microsoft Windows 11 version 23H2 Microsoft Windows 11 Version 24H2 Microsoft Windows 11 Version 25H2 Microsoft Windows 11 version 26H1 Microsoft Windows 11 Version 26H2 Microsoft Windows Server 2025 Microsoft Windows Server 2025 (Server Core installation)Microsoft Windows 10 Version 21H2 Microsoft Windows 10 Version 22H2 Microsoft Windows Server 2022 Microsoft Windows 10 21H2 NIST National Vulnerability DatabasePublished Oct 13, 2026 19:21 UTC Read the advisory
	High	7.0	CVE-2026-96250	Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. MicrosoftMicrosoft Windows 11 version 23H2, Microsoft Windows 11 Version 24H2, Microsoft Windows 11 Version 25H2, Microsoft Windows 11 version 26H1, Microsoft Windows 11 Version 26H2, Microsoft Windows Server 2025, Microsoft Windows Server 2025 (Server Core installation), Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 22H2, Microsoft Windows Server 2022, Microsoft Windows 10 21H2	NVD	Oct 13 19:21 UTC
CVE-2026-96250Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. From the advisory Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Local Attack complexity High Privileges required Low User interaction None Scope Unchanged CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Affects Microsoft Microsoft Windows 11 version 23H2 Microsoft Windows 11 Version 24H2 Microsoft Windows 11 Version 25H2 Microsoft Windows 11 version 26H1 Microsoft Windows 11 Version 26H2 Microsoft Windows Server 2025 Microsoft Windows Server 2025 (Server Core installation)Microsoft Windows 10 Version 21H2 Microsoft Windows 10 Version 22H2 Microsoft Windows Server 2022 Microsoft Windows 10 21H2 NIST National Vulnerability DatabasePublished Oct 13, 2026 19:21 UTC Read the advisory
	High	7.8	CVE-2026-88073	Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. MicrosoftMicrosoft Windows 11 version 23H2, Microsoft Windows 11 Version 24H2, Microsoft Windows 11 Version 25H2, Microsoft Windows 11 version 26H1, Microsoft Windows 11 Version 26H2, Microsoft Windows Server 2025, Microsoft Windows Server 2025 (Server Core installation), Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 22H2, Microsoft Windows 10 21H2, Microsoft Windows 10 22H2	NVD	Oct 13 19:21 UTC
CVE-2026-88073Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. From the advisory Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Local Attack complexity Low Privileges required Low User interaction None Scope Unchanged CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affects Microsoft Microsoft Windows 11 version 23H2 Microsoft Windows 11 Version 24H2 Microsoft Windows 11 Version 25H2 Microsoft Windows 11 version 26H1 Microsoft Windows 11 Version 26H2 Microsoft Windows Server 2025 Microsoft Windows Server 2025 (Server Core installation)Microsoft Windows 10 Version 21H2 Microsoft Windows 10 Version 22H2 Microsoft Windows 10 21H2 Microsoft Windows 10 22H2 NIST National Vulnerability DatabasePublished Oct 13, 2026 19:21 UTC Read the advisory
	High	7.0	CVE-2026-85824	Use after free in Windows Composite Image File System allows an authorized attacker to elevate privileges locally. MicrosoftMicrosoft Windows 11 version 23H2, Microsoft Windows 11 Version 24H2, Microsoft Windows 11 Version 25H2, Microsoft Windows 11 version 26H1, Microsoft Windows 11 Version 26H2, Microsoft Windows Server 2025, Microsoft Windows Server 2025 (Server Core installation), Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 22H2, Microsoft Windows Server 2022, Microsoft Windows 10 21H2	NVD	Oct 13 19:21 UTC
CVE-2026-85824Use after free in Windows Composite Image File System allows an authorized attacker to elevate privileges locally. From the advisory Use after free in Windows Composite Image File System allows an authorized attacker to elevate privileges locally. Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Local Attack complexity High Privileges required Low User interaction None Scope Unchanged CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Affects Microsoft Microsoft Windows 11 version 23H2 Microsoft Windows 11 Version 24H2 Microsoft Windows 11 Version 25H2 Microsoft Windows 11 version 26H1 Microsoft Windows 11 Version 26H2 Microsoft Windows Server 2025 Microsoft Windows Server 2025 (Server Core installation)Microsoft Windows 10 Version 21H2 Microsoft Windows 10 Version 22H2 Microsoft Windows Server 2022 Microsoft Windows 10 21H2 NIST National Vulnerability DatabasePublished Oct 13, 2026 19:21 UTC Read the advisory
	Medium	5.5	CVE-2026-85812	Files or directories accessible to external parties in Windows Bind Filter Driver allows an authorized attacker to disclose information locally. MicrosoftMicrosoft Windows 11 version 23H2, Microsoft Windows 11 Version 24H2, Microsoft Windows 11 Version 25H2, Microsoft Windows 11 version 26H1, Microsoft Windows 11 Version 26H2, Microsoft Windows Server 2025, Microsoft Windows Server 2025 (Server Core installation), Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 22H2, Microsoft Windows Server 2022, Microsoft Windows 10 21H2	NVD	Oct 13 19:21 UTC
CVE-2026-85812Files or directories accessible to external parties in Windows Bind Filter Driver allows an authorized attacker to disclose information locally. From the advisory Files or directories accessible to external parties in Windows Bind Filter Driver allows an authorized attacker to disclose information locally. Impact if exploited ConfidentialityHigh IntegrityNone AvailabilityNone How it is exploited Attack vector Local Attack complexity Low Privileges required Low User interaction None Scope Unchanged CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N Affects Microsoft Microsoft Windows 11 version 23H2 Microsoft Windows 11 Version 24H2 Microsoft Windows 11 Version 25H2 Microsoft Windows 11 version 26H1 Microsoft Windows 11 Version 26H2 Microsoft Windows Server 2025 Microsoft Windows Server 2025 (Server Core installation)Microsoft Windows 10 Version 21H2 Microsoft Windows 10 Version 22H2 Microsoft Windows Server 2022 Microsoft Windows 10 21H2 NIST National Vulnerability DatabasePublished Oct 13, 2026 19:21 UTC Read the advisory
	High	7.0	CVE-2026-84020	Use after free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally. MicrosoftMicrosoft Windows 11 version 23H2, Microsoft Windows 11 Version 24H2, Microsoft Windows 11 Version 25H2, Microsoft Windows 11 version 26H1, Microsoft Windows 11 Version 26H2, Microsoft Windows Server 2025, Microsoft Windows Server 2025 (Server Core installation), Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 22H2, Microsoft Windows Server 2022, Microsoft Windows 10 21H2	NVD	Oct 13 19:20 UTC
CVE-2026-84020Use after free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally. From the advisory Use after free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally. Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Local Attack complexity High Privileges required Low User interaction None Scope Unchanged CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Affects Microsoft Microsoft Windows 11 version 23H2 Microsoft Windows 11 Version 24H2 Microsoft Windows 11 Version 25H2 Microsoft Windows 11 version 26H1 Microsoft Windows 11 Version 26H2 Microsoft Windows Server 2025 Microsoft Windows Server 2025 (Server Core installation)Microsoft Windows 10 Version 21H2 Microsoft Windows 10 Version 22H2 Microsoft Windows Server 2022 Microsoft Windows 10 21H2 NIST National Vulnerability DatabasePublished Oct 13, 2026 19:20 UTC Read the advisory
	High	7.0	CVE-2026-83853	Use after free in Windows Hello allows an authorized attacker to elevate privileges locally. MicrosoftMicrosoft Windows 11 version 23H2, Microsoft Windows 11 Version 24H2, Microsoft Windows 11 Version 25H2, Microsoft Windows 11 version 26H1, Microsoft Windows 11 Version 26H2, Microsoft Windows 11 23H2, Microsoft Windows 11 24H2, Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 22H2, Microsoft Windows 10 21H2, Microsoft Windows 10 22H2	NVD	Oct 13 19:20 UTC
CVE-2026-83853Use after free in Windows Hello allows an authorized attacker to elevate privileges locally. From the advisory Use after free in Windows Hello allows an authorized attacker to elevate privileges locally. Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Local Attack complexity High Privileges required Low User interaction None Scope Unchanged CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Affects Microsoft Microsoft Windows 11 version 23H2 Microsoft Windows 11 Version 24H2 Microsoft Windows 11 Version 25H2 Microsoft Windows 11 version 26H1 Microsoft Windows 11 Version 26H2 Microsoft Windows 11 23H2 Microsoft Windows 11 24H2 Microsoft Windows 10 Version 21H2 Microsoft Windows 10 Version 22H2 Microsoft Windows 10 21H2 Microsoft Windows 10 22H2 NIST National Vulnerability DatabasePublished Oct 13, 2026 19:20 UTC Read the advisory
	High	7.8	CVE-2026-83756	Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. MicrosoftMicrosoft Windows 11 version 23H2, Microsoft Windows 11 Version 24H2, Microsoft Windows 11 Version 25H2, Microsoft Windows 11 version 26H1, Microsoft Windows 11 Version 26H2, Microsoft Windows Server 2025, Microsoft Windows Server 2025 (Server Core installation), Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 22H2, Microsoft Windows Server 2022, Microsoft Windows 10 21H2	NVD	Oct 13 19:20 UTC
CVE-2026-83756Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. From the advisory Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Local Attack complexity Low Privileges required Low User interaction None Scope Unchanged CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affects Microsoft Microsoft Windows 11 version 23H2 Microsoft Windows 11 Version 24H2 Microsoft Windows 11 Version 25H2 Microsoft Windows 11 version 26H1 Microsoft Windows 11 Version 26H2 Microsoft Windows Server 2025 Microsoft Windows Server 2025 (Server Core installation)Microsoft Windows 10 Version 21H2 Microsoft Windows 10 Version 22H2 Microsoft Windows Server 2022 Microsoft Windows 10 21H2 NIST National Vulnerability DatabasePublished Oct 13, 2026 19:20 UTC Read the advisory
	High	7.8	CVE-2026-70027	Heap-based buffer overflow in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally. MicrosoftMicrosoft Windows 11 version 23H2, Microsoft Windows 11 Version 24H2, Microsoft Windows 11 Version 25H2, Microsoft Windows 11 version 26H1, Microsoft Windows 11 Version 26H2, Microsoft Windows Server 2025, Microsoft Windows Server 2025 (Server Core installation), Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 22H2, Microsoft Windows Server 2022, Microsoft Windows 10 21H2	NVD	Oct 13 19:19 UTC
CVE-2026-70027Heap-based buffer overflow in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally. From the advisory Heap-based buffer overflow in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally. Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Local Attack complexity Low Privileges required Low User interaction None Scope Unchanged CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affects Microsoft Microsoft Windows 11 version 23H2 Microsoft Windows 11 Version 24H2 Microsoft Windows 11 Version 25H2 Microsoft Windows 11 version 26H1 Microsoft Windows 11 Version 26H2 Microsoft Windows Server 2025 Microsoft Windows Server 2025 (Server Core installation)Microsoft Windows 10 Version 21H2 Microsoft Windows 10 Version 22H2 Microsoft Windows Server 2022 Microsoft Windows 10 21H2 NIST National Vulnerability DatabasePublished Oct 13, 2026 19:19 UTC Read the advisory
	Medium	6.8	CVE-2026-69947	Heap-based buffer overflow in Windows Overlay Filter allows an unauthorized attacker to execute code with a physical attack. MicrosoftMicrosoft Windows 11 version 23H2, Microsoft Windows 11 Version 24H2, Microsoft Windows 11 Version 25H2, Microsoft Windows 11 version 26H1, Microsoft Windows 11 Version 26H2, Microsoft Windows Server 2025, Microsoft Windows Server 2025 (Server Core installation), Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 22H2, Microsoft Windows Server 2022, Microsoft Windows 10 21H2	NVD	Oct 13 19:19 UTC
CVE-2026-69947Heap-based buffer overflow in Windows Overlay Filter allows an unauthorized attacker to execute code with a physical attack. From the advisory Heap-based buffer overflow in Windows Overlay Filter allows an unauthorized attacker to execute code with a physical attack. Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Physical Attack complexity Low Privileges required None User interaction None Scope Unchanged CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affects Microsoft Microsoft Windows 11 version 23H2 Microsoft Windows 11 Version 24H2 Microsoft Windows 11 Version 25H2 Microsoft Windows 11 version 26H1 Microsoft Windows 11 Version 26H2 Microsoft Windows Server 2025 Microsoft Windows Server 2025 (Server Core installation)Microsoft Windows 10 Version 21H2 Microsoft Windows 10 Version 22H2 Microsoft Windows Server 2022 Microsoft Windows 10 21H2 NIST National Vulnerability DatabasePublished Oct 13, 2026 19:19 UTC Read the advisory
	High	8.8	CVE-2026-69945	Missing authorization in Windows AppX Deployment Extensions allows an authorized attacker to elevate privileges locally. MicrosoftMicrosoft Windows 11 version 23H2, Microsoft Windows 11 Version 24H2, Microsoft Windows 11 Version 25H2, Microsoft Windows 11 version 26H1, Microsoft Windows 11 Version 26H2, Microsoft Windows Server 2025, Microsoft Windows Server 2025 (Server Core installation), Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 22H2, Microsoft Windows Server 2022, Microsoft Windows 10 21H2	NVD	Oct 13 19:19 UTC
CVE-2026-69945Missing authorization in Windows AppX Deployment Extensions allows an authorized attacker to elevate privileges locally. From the advisory Missing authorization in Windows AppX Deployment Extensions allows an authorized attacker to elevate privileges locally. Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Local Attack complexity Low Privileges required Low User interaction None Scope Changed CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H Affects Microsoft Microsoft Windows 11 version 23H2 Microsoft Windows 11 Version 24H2 Microsoft Windows 11 Version 25H2 Microsoft Windows 11 version 26H1 Microsoft Windows 11 Version 26H2 Microsoft Windows Server 2025 Microsoft Windows Server 2025 (Server Core installation)Microsoft Windows 10 Version 21H2 Microsoft Windows 10 Version 22H2 Microsoft Windows Server 2022 Microsoft Windows 10 21H2 NIST National Vulnerability DatabasePublished Oct 13, 2026 19:19 UTC Read the advisory
	High	7.0	CVE-2026-108135	Improper link resolution before file access ('link following') in Windows Backup Engine allows an authorized attacker to elevate privileges locally. MicrosoftMicrosoft Windows 11 version 23H2, Microsoft Windows 11 Version 24H2, Microsoft Windows 11 Version 25H2, Microsoft Windows 11 version 26H1, Microsoft Windows 11 Version 26H2, Microsoft Windows 11 23H2, Microsoft Windows 11 24H2, Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 22H2, Microsoft Windows 10 21H2, Microsoft Windows 10 22H2	NVD	Oct 13 19:18 UTC
CVE-2026-108135Improper link resolution before file access ('link following') in Windows Backup Engine allows an authorized attacker to elevate privileges locally. From the advisory Improper link resolution before file access ('link following') in Windows Backup Engine allows an authorized attacker to elevate privileges locally. Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Local Attack complexity High Privileges required Low User interaction None Scope Unchanged CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Affects Microsoft Microsoft Windows 11 version 23H2 Microsoft Windows 11 Version 24H2 Microsoft Windows 11 Version 25H2 Microsoft Windows 11 version 26H1 Microsoft Windows 11 Version 26H2 Microsoft Windows 11 23H2 Microsoft Windows 11 24H2 Microsoft Windows 10 Version 21H2 Microsoft Windows 10 Version 22H2 Microsoft Windows 10 21H2 Microsoft Windows 10 22H2 NIST National Vulnerability DatabasePublished Oct 13, 2026 19:18 UTC Read the advisory
	High	7.0	CVE-2026-102193	Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. MicrosoftMicrosoft Windows 11 version 23H2, Microsoft Windows 11 Version 24H2, Microsoft Windows 11 Version 25H2, Microsoft Windows 11 version 26H1, Microsoft Windows 11 Version 26H2, Microsoft Windows 10 Version 1809, Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 22H2, Microsoft Windows 10 1809, Microsoft Windows 10 21H2, Microsoft Windows 10 22H2	NVD	Oct 13 19:17 UTC
CVE-2026-102193Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. From the advisory Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Local Attack complexity High Privileges required Low User interaction None Scope Unchanged CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Affects Microsoft Microsoft Windows 11 version 23H2 Microsoft Windows 11 Version 24H2 Microsoft Windows 11 Version 25H2 Microsoft Windows 11 version 26H1 Microsoft Windows 11 Version 26H2 Microsoft Windows 10 Version 1809 Microsoft Windows 10 Version 21H2 Microsoft Windows 10 Version 22H2 Microsoft Windows 10 1809 Microsoft Windows 10 21H2 Microsoft Windows 10 22H2 NIST National Vulnerability DatabasePublished Oct 13, 2026 19:17 UTC Read the advisory

Example	Finds
	Every word appears somewhere: title, summaries, IDs, vendor, or product
	An exact phrase
	One vendor. product: for a product, vp: for either
	Commas mean any of them, in every field
	Severity: critical, high, medium, low, or unknown
	CVSS score, with >, >=, <, or <=
	A score range
	Known exploited. is:kev works too, and kev:no leaves them out
	One source, by name
	Confidentiality impact: high, low, none, or any (low or high)
	Integrity and availability work the same way
	An advisory or CVE ID, or part of one
	A minus sign leaves out whatever the term matches

Vulnerability feed

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited