Vulnerability feed

CVE and vendor PSIRT advisories from 13 sources, last 30 days. Updated hourly, last run Oct 26 01:05 UTC

Critical in the last 24 hours

1603 in 30 days

Newly known exploited

In the last 24 hours, CISA KEV and vendor reports

Sources checked

Every hour, see the list

New in the last 24 hours

136-77% vs 7-day avg of 597

2 critical, 34 high, 59 medium, 21 low

111 advisories match Clear all Export 25 shown as CSV

Expand	Severity	Score	Advisory	Title	Source	Flags	Published
	High	8.8	CVE-2026-96951	Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a security feature over a network. MicrosoftMicrosoft Windows 11 version 23H2, Microsoft Windows 11 Version 24H2, Microsoft Windows 11 Version 25H2, Microsoft Windows 11 version 26H1, Microsoft Windows 11 Version 26H2, Microsoft Windows 10 Version 1809, Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 22H2, Microsoft Windows 10 Version 1607, Microsoft Windows Server 2012 R2, Microsoft Outlook.com	NVD	KEV	Oct 13 19:22 UTC
CVE-2026-96951Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a security feature over a network. From the advisory Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a security feature over a network. Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Network Attack complexity Low Privileges required None User interaction Required Scope Unchanged CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affects Microsoft Microsoft Windows 11 version 23H2 Microsoft Windows 11 Version 24H2 Microsoft Windows 11 Version 25H2 Microsoft Windows 11 version 26H1 Microsoft Windows 11 Version 26H2 Microsoft Windows 10 Version 1809 Microsoft Windows 10 Version 21H2 Microsoft Windows 10 Version 22H2 Microsoft Windows 10 Version 1607 Microsoft Windows Server 2012 R2 Microsoft Outlook.com NIST National Vulnerability DatabasePublished Oct 13, 2026 19:22 UTC Read the advisory
	Critical	9.8	CVE-2026-96934	Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network. MicrosoftMicrosoft Windows Server 2025, Microsoft Windows 10 Version 1809, Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows Server 2022, Microsoft Windows 10 Version 1607, Microsoft Windows Server 2012, Microsoft Windows Server 2012 (Server Core installation), Microsoft Windows Server 2016, Microsoft Windows Server 2016 (Server Core installation), Microsoft Windows Server 2012 R2, Microsoft Windows Server 2012 R2 (Server Core installation)	NVD		Oct 13 19:22 UTC
CVE-2026-96934Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network. From the advisory Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network. Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Network Attack complexity Low Privileges required None User interaction None Scope Unchanged CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affects Microsoft Microsoft Windows Server 2025 Microsoft Windows 10 Version 1809 Microsoft Windows Server 2019 Microsoft Windows Server 2019 (Server Core installation)Microsoft Windows Server 2022 Microsoft Windows 10 Version 1607 Microsoft Windows Server 2012 Microsoft Windows Server 2012 (Server Core installation)Microsoft Windows Server 2016 Microsoft Windows Server 2016 (Server Core installation)Microsoft Windows Server 2012 R2 Microsoft Windows Server 2012 R2 (Server Core installation) NIST National Vulnerability DatabasePublished Oct 13, 2026 19:22 UTC Read the advisory
	Medium	5.5	CVE-2026-96926	Missing authorization in DNS Server allows an authorized attacker to perform tampering locally. MicrosoftMicrosoft Windows Server 2025, Microsoft Windows 10 Version 1809, Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows Server 2022, Microsoft Windows 10 Version 1607, Microsoft Windows Server 2012, Microsoft Windows Server 2012 (Server Core installation), Microsoft Windows Server 2016, Microsoft Windows Server 2016 (Server Core installation), Microsoft Windows Server 2012 R2, Microsoft Windows Server 2012 R2 (Server Core installation)	NVD		Oct 13 19:22 UTC
CVE-2026-96926Missing authorization in DNS Server allows an authorized attacker to perform tampering locally. From the advisory Missing authorization in DNS Server allows an authorized attacker to perform tampering locally. Impact if exploited ConfidentialityNone IntegrityHigh AvailabilityNone How it is exploited Attack vector Local Attack complexity Low Privileges required Low User interaction None Scope Unchanged CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N Affects Microsoft Microsoft Windows Server 2025 Microsoft Windows 10 Version 1809 Microsoft Windows Server 2019 Microsoft Windows Server 2019 (Server Core installation)Microsoft Windows Server 2022 Microsoft Windows 10 Version 1607 Microsoft Windows Server 2012 Microsoft Windows Server 2012 (Server Core installation)Microsoft Windows Server 2016 Microsoft Windows Server 2016 (Server Core installation)Microsoft Windows Server 2012 R2 Microsoft Windows Server 2012 R2 (Server Core installation) NIST National Vulnerability DatabasePublished Oct 13, 2026 19:22 UTC Read the advisory
	High	7.5	CVE-2026-96866	Out-of-bounds read in Network Device Enrollment Service (NDES) allows an unauthorized attacker to deny service over a network. MicrosoftMicrosoft Windows Server 2025, Microsoft Windows 10 Version 1809, Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows Server 2022, Microsoft Windows 10 Version 1607, Microsoft Windows Server 2012, Microsoft Windows Server 2012 (Server Core installation), Microsoft Windows Server 2016, Microsoft Windows Server 2016 (Server Core installation), Microsoft Windows Server 2012 R2, Microsoft Windows Server 2012 R2 (Server Core installation)	NVD		Oct 13 19:22 UTC
CVE-2026-96866Out-of-bounds read in Network Device Enrollment Service (NDES) allows an unauthorized attacker to deny service over a network. From the advisory Out-of-bounds read in Network Device Enrollment Service (NDES) allows an unauthorized attacker to deny service over a network. Impact if exploited ConfidentialityNone IntegrityNone AvailabilityHigh How it is exploited Attack vector Network Attack complexity Low Privileges required None User interaction None Scope Unchanged CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affects Microsoft Microsoft Windows Server 2025 Microsoft Windows 10 Version 1809 Microsoft Windows Server 2019 Microsoft Windows Server 2019 (Server Core installation)Microsoft Windows Server 2022 Microsoft Windows 10 Version 1607 Microsoft Windows Server 2012 Microsoft Windows Server 2012 (Server Core installation)Microsoft Windows Server 2016 Microsoft Windows Server 2016 (Server Core installation)Microsoft Windows Server 2012 R2 Microsoft Windows Server 2012 R2 (Server Core installation) NIST National Vulnerability DatabasePublished Oct 13, 2026 19:22 UTC Read the advisory
	Critical	9.8	CVE-2026-96864	Double free in Microsoft Failover Cluster Virtual Driver allows an unauthorized attacker to execute code over a network. MicrosoftMicrosoft Windows Server 2025, Microsoft Windows 10 Version 1809, Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows Server 2022, Microsoft Windows 10 Version 1607, Microsoft Windows Server 2012, Microsoft Windows Server 2012 (Server Core installation), Microsoft Windows Server 2016, Microsoft Windows Server 2016 (Server Core installation), Microsoft Windows Server 2012 R2, Microsoft Windows Server 2012 R2 (Server Core installation)	NVD		Oct 13 19:22 UTC
CVE-2026-96864Double free in Microsoft Failover Cluster Virtual Driver allows an unauthorized attacker to execute code over a network. From the advisory Double free in Microsoft Failover Cluster Virtual Driver allows an unauthorized attacker to execute code over a network. Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Network Attack complexity Low Privileges required None User interaction None Scope Unchanged CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affects Microsoft Microsoft Windows Server 2025 Microsoft Windows 10 Version 1809 Microsoft Windows Server 2019 Microsoft Windows Server 2019 (Server Core installation)Microsoft Windows Server 2022 Microsoft Windows 10 Version 1607 Microsoft Windows Server 2012 Microsoft Windows Server 2012 (Server Core installation)Microsoft Windows Server 2016 Microsoft Windows Server 2016 (Server Core installation)Microsoft Windows Server 2012 R2 Microsoft Windows Server 2012 R2 (Server Core installation) NIST National Vulnerability DatabasePublished Oct 13, 2026 19:22 UTC Read the advisory
	High	7.5	CVE-2026-96861	Out-of-bounds read in Network Device Enrollment Service (NDES) allows an unauthorized attacker to deny service over a network. MicrosoftMicrosoft Windows Server 2025, Microsoft Windows 10 Version 1809, Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows Server 2022, Microsoft Windows 10 Version 1607, Microsoft Windows Server 2012, Microsoft Windows Server 2012 (Server Core installation), Microsoft Windows Server 2016, Microsoft Windows Server 2016 (Server Core installation), Microsoft Windows Server 2012 R2, Microsoft Windows Server 2012 R2 (Server Core installation)	NVD		Oct 13 19:22 UTC
CVE-2026-96861Out-of-bounds read in Network Device Enrollment Service (NDES) allows an unauthorized attacker to deny service over a network. From the advisory Out-of-bounds read in Network Device Enrollment Service (NDES) allows an unauthorized attacker to deny service over a network. Impact if exploited ConfidentialityNone IntegrityNone AvailabilityHigh How it is exploited Attack vector Network Attack complexity Low Privileges required None User interaction None Scope Unchanged CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affects Microsoft Microsoft Windows Server 2025 Microsoft Windows 10 Version 1809 Microsoft Windows Server 2019 Microsoft Windows Server 2019 (Server Core installation)Microsoft Windows Server 2022 Microsoft Windows 10 Version 1607 Microsoft Windows Server 2012 Microsoft Windows Server 2012 (Server Core installation)Microsoft Windows Server 2016 Microsoft Windows Server 2016 (Server Core installation)Microsoft Windows Server 2012 R2 Microsoft Windows Server 2012 R2 (Server Core installation) NIST National Vulnerability DatabasePublished Oct 13, 2026 19:22 UTC Read the advisory
	Medium	5.5	CVE-2026-96854	Access of resource using incompatible type ('type confusion') in Windows Device Association Service allows an authorized attacker to disclose information locally. MicrosoftMicrosoft Windows 11 version 23H2, Microsoft Windows 11 Version 24H2, Microsoft Windows 11 Version 25H2, Microsoft Windows 11 version 26H1, Microsoft Windows 11 Version 26H2, Microsoft Windows 10 Version 1809, Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 22H2, Microsoft Windows 10 Version 1607, Microsoft Windows Server 2012 R2, Microsoft Windows Server 2012 R2 (Server Core installation)	NVD		Oct 13 19:21 UTC
CVE-2026-96854Access of resource using incompatible type ('type confusion') in Windows Device Association Service allows an authorized attacker to disclose information locally. From the advisory Access of resource using incompatible type ('type confusion') in Windows Device Association Service allows an authorized attacker to disclose information locally. Impact if exploited ConfidentialityHigh IntegrityNone AvailabilityNone How it is exploited Attack vector Local Attack complexity Low Privileges required Low User interaction None Scope Unchanged CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N Affects Microsoft Microsoft Windows 11 version 23H2 Microsoft Windows 11 Version 24H2 Microsoft Windows 11 Version 25H2 Microsoft Windows 11 version 26H1 Microsoft Windows 11 Version 26H2 Microsoft Windows 10 Version 1809 Microsoft Windows 10 Version 21H2 Microsoft Windows 10 Version 22H2 Microsoft Windows 10 Version 1607 Microsoft Windows Server 2012 R2 Microsoft Windows Server 2012 R2 (Server Core installation) NIST National Vulnerability DatabasePublished Oct 13, 2026 19:21 UTC Read the advisory
	Critical	9.8	CVE-2026-96320	Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network. MicrosoftMicrosoft Windows Server 2025, Microsoft Windows 10 Version 1809, Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows Server 2022, Microsoft Windows 10 Version 1607, Microsoft Windows Server 2012, Microsoft Windows Server 2012 (Server Core installation), Microsoft Windows Server 2016, Microsoft Windows Server 2016 (Server Core installation), Microsoft Windows Server 2012 R2, Microsoft Windows Server 2012 R2 (Server Core installation)	NVD		Oct 13 19:21 UTC
CVE-2026-96320Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network. From the advisory Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network. Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Network Attack complexity Low Privileges required None User interaction None Scope Unchanged CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affects Microsoft Microsoft Windows Server 2025 Microsoft Windows 10 Version 1809 Microsoft Windows Server 2019 Microsoft Windows Server 2019 (Server Core installation)Microsoft Windows Server 2022 Microsoft Windows 10 Version 1607 Microsoft Windows Server 2012 Microsoft Windows Server 2012 (Server Core installation)Microsoft Windows Server 2016 Microsoft Windows Server 2016 (Server Core installation)Microsoft Windows Server 2012 R2 Microsoft Windows Server 2012 R2 (Server Core installation) NIST National Vulnerability DatabasePublished Oct 13, 2026 19:21 UTC Read the advisory
	High	7.8	CVE-2026-96312	Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. MicrosoftMicrosoft Windows 11 version 23H2, Microsoft Windows 11 Version 24H2, Microsoft Windows 11 Version 25H2, Microsoft Windows 11 Version 26H2, Microsoft Windows 10 Version 1809, Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 22H2, Microsoft Windows 10 Version 1607, Microsoft Windows Server 2012, Microsoft Windows Server 2012 (Server Core installation), Microsoft Windows Server 2012 R2	NVD		Oct 13 19:21 UTC
CVE-2026-96312Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. From the advisory Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Local Attack complexity Low Privileges required Low User interaction None Scope Unchanged CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affects Microsoft Microsoft Windows 11 version 23H2 Microsoft Windows 11 Version 24H2 Microsoft Windows 11 Version 25H2 Microsoft Windows 11 Version 26H2 Microsoft Windows 10 Version 1809 Microsoft Windows 10 Version 21H2 Microsoft Windows 10 Version 22H2 Microsoft Windows 10 Version 1607 Microsoft Windows Server 2012 Microsoft Windows Server 2012 (Server Core installation)Microsoft Windows Server 2012 R2 NIST National Vulnerability DatabasePublished Oct 13, 2026 19:21 UTC Read the advisory
	Medium	5.5	CVE-2026-96311	Improper authorization in Windows Network List Service allows an authorized attacker to perform tampering locally. MicrosoftMicrosoft Windows 11 version 23H2, Microsoft Windows 11 Version 24H2, Microsoft Windows 11 Version 25H2, Microsoft Windows 11 version 26H1, Microsoft Windows 11 Version 26H2, Microsoft Windows 10 Version 1809, Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 22H2, Microsoft Windows 10 Version 1607, Microsoft Windows Server 2012 R2, Microsoft Windows Server 2012 R2 (Server Core installation)	NVD		Oct 13 19:21 UTC
CVE-2026-96311Improper authorization in Windows Network List Service allows an authorized attacker to perform tampering locally. From the advisory Improper authorization in Windows Network List Service allows an authorized attacker to perform tampering locally. Impact if exploited ConfidentialityNone IntegrityHigh AvailabilityNone How it is exploited Attack vector Local Attack complexity Low Privileges required Low User interaction None Scope Unchanged CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N Affects Microsoft Microsoft Windows 11 version 23H2 Microsoft Windows 11 Version 24H2 Microsoft Windows 11 Version 25H2 Microsoft Windows 11 version 26H1 Microsoft Windows 11 Version 26H2 Microsoft Windows 10 Version 1809 Microsoft Windows 10 Version 21H2 Microsoft Windows 10 Version 22H2 Microsoft Windows 10 Version 1607 Microsoft Windows Server 2012 R2 Microsoft Windows Server 2012 R2 (Server Core installation) NIST National Vulnerability DatabasePublished Oct 13, 2026 19:21 UTC Read the advisory
	Critical	9.1	CVE-2026-96252	Improper verification of cryptographic signature in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network. MicrosoftMicrosoft Windows Server 2025, Microsoft Windows 10 Version 1809, Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows Server 2022, Microsoft Windows 10 Version 1607, Microsoft Windows Server 2012, Microsoft Windows Server 2012 (Server Core installation), Microsoft Windows Server 2016, Microsoft Windows Server 2016 (Server Core installation), Microsoft Windows Server 2012 R2, Microsoft Windows Server 2012 R2 (Server Core installation)	NVD		Oct 13 19:21 UTC
CVE-2026-96252Improper verification of cryptographic signature in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network. From the advisory Improper verification of cryptographic signature in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network. Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityNone How it is exploited Attack vector Network Attack complexity Low Privileges required None User interaction None Scope Unchanged CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N Affects Microsoft Microsoft Windows Server 2025 Microsoft Windows 10 Version 1809 Microsoft Windows Server 2019 Microsoft Windows Server 2019 (Server Core installation)Microsoft Windows Server 2022 Microsoft Windows 10 Version 1607 Microsoft Windows Server 2012 Microsoft Windows Server 2012 (Server Core installation)Microsoft Windows Server 2016 Microsoft Windows Server 2016 (Server Core installation)Microsoft Windows Server 2012 R2 Microsoft Windows Server 2012 R2 (Server Core installation) NIST National Vulnerability DatabasePublished Oct 13, 2026 19:21 UTC Read the advisory
	Medium	5.5	CVE-2026-96247	Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally. MicrosoftMicrosoft Windows 11 version 23H2, Microsoft Windows 11 Version 24H2, Microsoft Windows 11 Version 25H2, Microsoft Windows 11 version 26H1, Microsoft Windows 11 Version 26H2, Microsoft Windows 10 Version 1809, Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 22H2, Microsoft Windows 10 Version 1607, Microsoft Windows Server 2012 R2, Microsoft Windows Server 2012 R2 (Server Core installation)	NVD		Oct 13 19:21 UTC
CVE-2026-96247Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally. From the advisory Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally. Impact if exploited ConfidentialityHigh IntegrityNone AvailabilityNone How it is exploited Attack vector Local Attack complexity Low Privileges required Low User interaction None Scope Unchanged CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N Affects Microsoft Microsoft Windows 11 version 23H2 Microsoft Windows 11 Version 24H2 Microsoft Windows 11 Version 25H2 Microsoft Windows 11 version 26H1 Microsoft Windows 11 Version 26H2 Microsoft Windows 10 Version 1809 Microsoft Windows 10 Version 21H2 Microsoft Windows 10 Version 22H2 Microsoft Windows 10 Version 1607 Microsoft Windows Server 2012 R2 Microsoft Windows Server 2012 R2 (Server Core installation) NIST National Vulnerability DatabasePublished Oct 13, 2026 19:21 UTC Read the advisory
	Critical	9.8	CVE-2026-96113	Heap-based buffer overflow in DNS Server allows an unauthorized attacker to execute code over a network. MicrosoftMicrosoft Windows Server 2025, Microsoft Windows 10 Version 1809, Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows Server 2022, Microsoft Windows 10 Version 1607, Microsoft Windows Server 2012, Microsoft Windows Server 2012 (Server Core installation), Microsoft Windows Server 2016, Microsoft Windows Server 2016 (Server Core installation), Microsoft Windows Server 2012 R2, Microsoft Windows Server 2012 R2 (Server Core installation)	NVD		Oct 13 19:21 UTC
CVE-2026-96113Heap-based buffer overflow in DNS Server allows an unauthorized attacker to execute code over a network. From the advisory Heap-based buffer overflow in DNS Server allows an unauthorized attacker to execute code over a network. Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Network Attack complexity Low Privileges required None User interaction None Scope Unchanged CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affects Microsoft Microsoft Windows Server 2025 Microsoft Windows 10 Version 1809 Microsoft Windows Server 2019 Microsoft Windows Server 2019 (Server Core installation)Microsoft Windows Server 2022 Microsoft Windows 10 Version 1607 Microsoft Windows Server 2012 Microsoft Windows Server 2012 (Server Core installation)Microsoft Windows Server 2016 Microsoft Windows Server 2016 (Server Core installation)Microsoft Windows Server 2012 R2 Microsoft Windows Server 2012 R2 (Server Core installation) NIST National Vulnerability DatabasePublished Oct 13, 2026 19:21 UTC Read the advisory
	High	7.8	CVE-2026-88191	Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. MicrosoftMicrosoft Windows 11 version 23H2, Microsoft Windows 11 Version 24H2, Microsoft Windows 11 Version 25H2, Microsoft Windows 11 version 26H1, Microsoft Windows 11 Version 26H2, Microsoft Windows 10 Version 1809, Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 22H2, Microsoft Windows 10 Version 1607, Microsoft Windows Server 2012 R2, Microsoft Windows Server 2012 R2 (Server Core installation)	NVD		Oct 13 19:21 UTC
CVE-2026-88191Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. From the advisory Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Local Attack complexity Low Privileges required Low User interaction None Scope Unchanged CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affects Microsoft Microsoft Windows 11 version 23H2 Microsoft Windows 11 Version 24H2 Microsoft Windows 11 Version 25H2 Microsoft Windows 11 version 26H1 Microsoft Windows 11 Version 26H2 Microsoft Windows 10 Version 1809 Microsoft Windows 10 Version 21H2 Microsoft Windows 10 Version 22H2 Microsoft Windows 10 Version 1607 Microsoft Windows Server 2012 R2 Microsoft Windows Server 2012 R2 (Server Core installation) NIST National Vulnerability DatabasePublished Oct 13, 2026 19:21 UTC Read the advisory
	High	7.8	CVE-2026-88182	Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. MicrosoftMicrosoft Windows 11 version 23H2, Microsoft Windows 11 Version 24H2, Microsoft Windows 11 Version 25H2, Microsoft Windows 11 version 26H1, Microsoft Windows 11 Version 26H2, Microsoft Windows 10 Version 1809, Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 22H2, Microsoft Windows 10 Version 1607, Microsoft Windows Server 2012 R2, Microsoft Windows Server 2012 R2 (Server Core installation)	NVD		Oct 13 19:21 UTC
CVE-2026-88182Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. From the advisory Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Local Attack complexity Low Privileges required Low User interaction None Scope Unchanged CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affects Microsoft Microsoft Windows 11 version 23H2 Microsoft Windows 11 Version 24H2 Microsoft Windows 11 Version 25H2 Microsoft Windows 11 version 26H1 Microsoft Windows 11 Version 26H2 Microsoft Windows 10 Version 1809 Microsoft Windows 10 Version 21H2 Microsoft Windows 10 Version 22H2 Microsoft Windows 10 Version 1607 Microsoft Windows Server 2012 R2 Microsoft Windows Server 2012 R2 (Server Core installation) NIST National Vulnerability DatabasePublished Oct 13, 2026 19:21 UTC Read the advisory
	High	8.1	CVE-2026-88174	Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Deployment Services allows an unauthorized attacker to execute code over... MicrosoftMicrosoft Windows Server 2025, Microsoft Windows 10 Version 1809, Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows Server 2022, Microsoft Windows 10 Version 1607, Microsoft Windows Server 2012, Microsoft Windows Server 2012 (Server Core installation), Microsoft Windows Server 2016, Microsoft Windows Server 2016 (Server Core installation), Microsoft Windows Server 2012 R2, Microsoft Windows Server 2012 R2 (Server Core installation)	NVD		Oct 13 19:21 UTC
CVE-2026-88174Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Deployment Services allows an unauthorized attacker to execute code over... From the advisory Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Deployment Services allows an unauthorized attacker to execute code over a network. Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Network Attack complexity High Privileges required None User interaction None Scope Unchanged CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affects Microsoft Microsoft Windows Server 2025 Microsoft Windows 10 Version 1809 Microsoft Windows Server 2019 Microsoft Windows Server 2019 (Server Core installation)Microsoft Windows Server 2022 Microsoft Windows 10 Version 1607 Microsoft Windows Server 2012 Microsoft Windows Server 2012 (Server Core installation)Microsoft Windows Server 2016 Microsoft Windows Server 2016 (Server Core installation)Microsoft Windows Server 2012 R2 Microsoft Windows Server 2012 R2 (Server Core installation) NIST National Vulnerability DatabasePublished Oct 13, 2026 19:21 UTC Read the advisory
	High	8.1	CVE-2026-88173	Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network. MicrosoftMicrosoft Windows Server 2025, Microsoft Windows 10 Version 1809, Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows Server 2022, Microsoft Windows 10 Version 1607, Microsoft Windows Server 2012, Microsoft Windows Server 2012 (Server Core installation), Microsoft Windows Server 2016, Microsoft Windows Server 2016 (Server Core installation), Microsoft Windows Server 2012 R2, Microsoft Windows Server 2012 R2 (Server Core installation)	NVD		Oct 13 19:21 UTC
CVE-2026-88173Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network. From the advisory Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network. Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Network Attack complexity High Privileges required None User interaction None Scope Unchanged CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affects Microsoft Microsoft Windows Server 2025 Microsoft Windows 10 Version 1809 Microsoft Windows Server 2019 Microsoft Windows Server 2019 (Server Core installation)Microsoft Windows Server 2022 Microsoft Windows 10 Version 1607 Microsoft Windows Server 2012 Microsoft Windows Server 2012 (Server Core installation)Microsoft Windows Server 2016 Microsoft Windows Server 2016 (Server Core installation)Microsoft Windows Server 2012 R2 Microsoft Windows Server 2012 R2 (Server Core installation) NIST National Vulnerability DatabasePublished Oct 13, 2026 19:21 UTC Read the advisory
	High	8.1	CVE-2026-88171	Double free in Windows DHCP Server allows an unauthorized attacker to execute code over a network. MicrosoftMicrosoft Windows Server 2025, Microsoft Windows 10 Version 1809, Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows Server 2022, Microsoft Windows 10 Version 1607, Microsoft Windows Server 2012, Microsoft Windows Server 2012 (Server Core installation), Microsoft Windows Server 2016, Microsoft Windows Server 2016 (Server Core installation), Microsoft Windows Server 2012 R2, Microsoft Windows Server 2012 R2 (Server Core installation)	NVD		Oct 13 19:21 UTC
CVE-2026-88171Double free in Windows DHCP Server allows an unauthorized attacker to execute code over a network. From the advisory Double free in Windows DHCP Server allows an unauthorized attacker to execute code over a network. Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Network Attack complexity High Privileges required None User interaction None Scope Unchanged CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affects Microsoft Microsoft Windows Server 2025 Microsoft Windows 10 Version 1809 Microsoft Windows Server 2019 Microsoft Windows Server 2019 (Server Core installation)Microsoft Windows Server 2022 Microsoft Windows 10 Version 1607 Microsoft Windows Server 2012 Microsoft Windows Server 2012 (Server Core installation)Microsoft Windows Server 2016 Microsoft Windows Server 2016 (Server Core installation)Microsoft Windows Server 2012 R2 Microsoft Windows Server 2012 R2 (Server Core installation) NIST National Vulnerability DatabasePublished Oct 13, 2026 19:21 UTC Read the advisory
	High	7.0	CVE-2026-88160	Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Windows Search Component allows an authorized attacker to elevate... MicrosoftMicrosoft Windows 11 version 23H2, Microsoft Windows 11 Version 24H2, Microsoft Windows 11 Version 25H2, Microsoft Windows 11 version 26H1, Microsoft Windows 11 Version 26H2, Microsoft Windows 10 Version 1809, Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 22H2, Microsoft Windows 10 Version 1607, Microsoft Windows Server 2012 R2, Microsoft Windows Server 2012 R2 (Server Core installation)	NVD		Oct 13 19:21 UTC
CVE-2026-88160Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Windows Search Component allows an authorized attacker to elevate... From the advisory Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Local Attack complexity High Privileges required Low User interaction None Scope Unchanged CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Affects Microsoft Microsoft Windows 11 version 23H2 Microsoft Windows 11 Version 24H2 Microsoft Windows 11 Version 25H2 Microsoft Windows 11 version 26H1 Microsoft Windows 11 Version 26H2 Microsoft Windows 10 Version 1809 Microsoft Windows 10 Version 21H2 Microsoft Windows 10 Version 22H2 Microsoft Windows 10 Version 1607 Microsoft Windows Server 2012 R2 Microsoft Windows Server 2012 R2 (Server Core installation) NIST National Vulnerability DatabasePublished Oct 13, 2026 19:21 UTC Read the advisory
	High	7.8	CVE-2026-88147	Heap-based buffer overflow in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to elevate privileges locally. MicrosoftMicrosoft Windows 11 version 23H2, Microsoft Windows 11 Version 24H2, Microsoft Windows 11 Version 25H2, Microsoft Windows 11 version 26H1, Microsoft Windows 11 Version 26H2, Microsoft Windows 10 Version 1809, Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 22H2, Microsoft Windows 10 Version 1607, Microsoft Windows Server 2012 R2, Microsoft Windows Server 2012 R2 (Server Core installation)	NVD		Oct 13 19:21 UTC
CVE-2026-88147Heap-based buffer overflow in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to elevate privileges locally. From the advisory Heap-based buffer overflow in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to elevate privileges locally. Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Local Attack complexity Low Privileges required Low User interaction None Scope Unchanged CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affects Microsoft Microsoft Windows 11 version 23H2 Microsoft Windows 11 Version 24H2 Microsoft Windows 11 Version 25H2 Microsoft Windows 11 version 26H1 Microsoft Windows 11 Version 26H2 Microsoft Windows 10 Version 1809 Microsoft Windows 10 Version 21H2 Microsoft Windows 10 Version 22H2 Microsoft Windows 10 Version 1607 Microsoft Windows Server 2012 R2 Microsoft Windows Server 2012 R2 (Server Core installation) NIST National Vulnerability DatabasePublished Oct 13, 2026 19:21 UTC Read the advisory
	Medium	6.5	CVE-2026-88130	Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network. MicrosoftMicrosoft Windows Server 2025, Microsoft Windows Server 2025 (Server Core installation), Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows Server 2022, Microsoft Windows Server 2012, Microsoft Windows Server 2012 (Server Core installation), Microsoft Windows Server 2016, Microsoft Windows Server 2016 (Server Core installation), Microsoft Windows Server 2012 R2, Microsoft Windows Server 2012 R2 (Server Core installation)	NVD		Oct 13 19:21 UTC
CVE-2026-88130Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network. From the advisory Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network. Impact if exploited ConfidentialityNone IntegrityNone AvailabilityHigh How it is exploited Attack vector Network Attack complexity Low Privileges required Low User interaction None Scope Unchanged CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affects Microsoft Microsoft Windows Server 2025 Microsoft Windows Server 2025 (Server Core installation)Microsoft Windows Server 2019 Microsoft Windows Server 2019 (Server Core installation)Microsoft Windows Server 2022 Microsoft Windows Server 2012 Microsoft Windows Server 2012 (Server Core installation)Microsoft Windows Server 2016 Microsoft Windows Server 2016 (Server Core installation)Microsoft Windows Server 2012 R2 Microsoft Windows Server 2012 R2 (Server Core installation) NIST National Vulnerability DatabasePublished Oct 13, 2026 19:21 UTC Read the advisory
	Medium	6.5	CVE-2026-88129	Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network. MicrosoftMicrosoft Windows Server 2025, Microsoft Windows Server 2025 (Server Core installation), Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows Server 2022, Microsoft Windows Server 2012, Microsoft Windows Server 2012 (Server Core installation), Microsoft Windows Server 2016, Microsoft Windows Server 2016 (Server Core installation), Microsoft Windows Server 2012 R2, Microsoft Windows Server 2012 R2 (Server Core installation)	NVD		Oct 13 19:21 UTC
CVE-2026-88129Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network. From the advisory Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network. Impact if exploited ConfidentialityNone IntegrityNone AvailabilityHigh How it is exploited Attack vector Network Attack complexity Low Privileges required Low User interaction None Scope Unchanged CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affects Microsoft Microsoft Windows Server 2025 Microsoft Windows Server 2025 (Server Core installation)Microsoft Windows Server 2019 Microsoft Windows Server 2019 (Server Core installation)Microsoft Windows Server 2022 Microsoft Windows Server 2012 Microsoft Windows Server 2012 (Server Core installation)Microsoft Windows Server 2016 Microsoft Windows Server 2016 (Server Core installation)Microsoft Windows Server 2012 R2 Microsoft Windows Server 2012 R2 (Server Core installation) NIST National Vulnerability DatabasePublished Oct 13, 2026 19:21 UTC Read the advisory
	Medium	6.5	CVE-2026-88125	Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network. MicrosoftMicrosoft Windows Server 2025, Microsoft Windows Server 2025 (Server Core installation), Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows Server 2022, Microsoft Windows Server 2012, Microsoft Windows Server 2012 (Server Core installation), Microsoft Windows Server 2016, Microsoft Windows Server 2016 (Server Core installation), Microsoft Windows Server 2012 R2, Microsoft Windows Server 2012 R2 (Server Core installation)	NVD		Oct 13 19:21 UTC
CVE-2026-88125Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network. From the advisory Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network. Impact if exploited ConfidentialityNone IntegrityNone AvailabilityHigh How it is exploited Attack vector Network Attack complexity Low Privileges required Low User interaction None Scope Unchanged CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affects Microsoft Microsoft Windows Server 2025 Microsoft Windows Server 2025 (Server Core installation)Microsoft Windows Server 2019 Microsoft Windows Server 2019 (Server Core installation)Microsoft Windows Server 2022 Microsoft Windows Server 2012 Microsoft Windows Server 2012 (Server Core installation)Microsoft Windows Server 2016 Microsoft Windows Server 2016 (Server Core installation)Microsoft Windows Server 2012 R2 Microsoft Windows Server 2012 R2 (Server Core installation) NIST National Vulnerability DatabasePublished Oct 13, 2026 19:21 UTC Read the advisory
	Medium	6.5	CVE-2026-88123	Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network. MicrosoftMicrosoft Windows Server 2025, Microsoft Windows Server 2025 (Server Core installation), Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows Server 2022, Microsoft Windows Server 2012, Microsoft Windows Server 2012 (Server Core installation), Microsoft Windows Server 2016, Microsoft Windows Server 2016 (Server Core installation), Microsoft Windows Server 2012 R2, Microsoft Windows Server 2012 R2 (Server Core installation)	NVD		Oct 13 19:21 UTC
CVE-2026-88123Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network. From the advisory Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network. Impact if exploited ConfidentialityNone IntegrityNone AvailabilityHigh How it is exploited Attack vector Network Attack complexity Low Privileges required Low User interaction None Scope Unchanged CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affects Microsoft Microsoft Windows Server 2025 Microsoft Windows Server 2025 (Server Core installation)Microsoft Windows Server 2019 Microsoft Windows Server 2019 (Server Core installation)Microsoft Windows Server 2022 Microsoft Windows Server 2012 Microsoft Windows Server 2012 (Server Core installation)Microsoft Windows Server 2016 Microsoft Windows Server 2016 (Server Core installation)Microsoft Windows Server 2012 R2 Microsoft Windows Server 2012 R2 (Server Core installation) NIST National Vulnerability DatabasePublished Oct 13, 2026 19:21 UTC Read the advisory
	Medium	6.5	CVE-2026-88122	Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network. MicrosoftMicrosoft Windows Server 2025, Microsoft Windows Server 2025 (Server Core installation), Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows Server 2022, Microsoft Windows Server 2012, Microsoft Windows Server 2012 (Server Core installation), Microsoft Windows Server 2016, Microsoft Windows Server 2016 (Server Core installation), Microsoft Windows Server 2012 R2, Microsoft Windows Server 2012 R2 (Server Core installation)	NVD		Oct 13 19:21 UTC
CVE-2026-88122Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network. From the advisory Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network. Impact if exploited ConfidentialityNone IntegrityNone AvailabilityHigh How it is exploited Attack vector Network Attack complexity Low Privileges required Low User interaction None Scope Unchanged CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affects Microsoft Microsoft Windows Server 2025 Microsoft Windows Server 2025 (Server Core installation)Microsoft Windows Server 2019 Microsoft Windows Server 2019 (Server Core installation)Microsoft Windows Server 2022 Microsoft Windows Server 2012 Microsoft Windows Server 2012 (Server Core installation)Microsoft Windows Server 2016 Microsoft Windows Server 2016 (Server Core installation)Microsoft Windows Server 2012 R2 Microsoft Windows Server 2012 R2 (Server Core installation) NIST National Vulnerability DatabasePublished Oct 13, 2026 19:21 UTC Read the advisory

Example	Finds
	Every word appears somewhere: title, summaries, IDs, vendor, or product
	An exact phrase
	One vendor. product: for a product, vp: for either
	Commas mean any of them, in every field
	Severity: critical, high, medium, low, or unknown
	CVSS score, with >, >=, <, or <=
	A score range
	Known exploited. is:kev works too, and kev:no leaves them out
	One source, by name
	Confidentiality impact: high, low, none, or any (low or high)
	Integrity and availability work the same way
	An advisory or CVE ID, or part of one
	A minus sign leaves out whatever the term matches

Vulnerability feed

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited