Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-83650 | high | 7.8 | No | Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges locally. | 2026-10-29 |
| CVE-2026-83649 | medium | 6.5 | No | Out-of-bounds read in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to deny service over a networ... | 2026-10-29 |
| CVE-2026-83923 | high | 8.8 | No | Relative path traversal in OpenSSH for Windows allows an unauthorized attacker to execute code over a network. | 2026-10-29 |
| CVE-2026-83648 | medium | 6.5 | No | Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network. | 2026-10-29 |
| CVE-2026-83846 | high | 7.0 | No | Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally. | 2026-10-29 |
| CVE-2026-83847 | high | 7.8 | No | Heap-based buffer overflow in Microsoft Account allows an authorized attacker to elevate privileges locally. | 2026-10-29 |
| CVE-2026-83863 | high | 7.8 | No | Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally. | 2026-10-29 |
| CVE-2026-83868 | high | 7.0 | No | Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Bluetooth Driver allows an authoriz... | 2026-10-29 |
| CVE-2026-83875 | medium | 5.5 | No | Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally. | 2026-10-29 |
| CVE-2026-83877 | high | 7.8 | No | Integer overflow or wraparound in HID Parser Library allows an authorized attacker to elevate privileges locally. | 2026-10-29 |
| CVE-2026-83884 | medium | 5.5 | No | Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally. | 2026-10-29 |
| CVE-2026-83887 | medium | 5.5 | No | Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally. | 2026-10-29 |
| CVE-2026-83892 | medium | 5.5 | No | Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally. | 2026-10-29 |
| CVE-2026-83898 | medium | 5.5 | No | Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally. | 2026-10-29 |
| CVE-2026-83901 | high | 7.0 | No | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | 2026-10-29 |
| CVE-2026-83902 | high | 7.8 | No | Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally. | 2026-10-29 |
| CVE-2026-83903 | high | 7.8 | No | Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally. | 2026-10-29 |
| CVE-2026-83904 | medium | 5.5 | No | Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally. | 2026-10-29 |
| CVE-2026-83905 | medium | 4.7 | No | Exposure of sensitive system information to an unauthorized control sphere in Windows Shell allows an authorized attacker to disclose inform... | 2026-10-29 |
| CVE-2026-83906 | medium | 6.5 | No | Incorrect implementation of authentication algorithm in Windows Shell allows an unauthorized attacker to perform spoofing over a network. | 2026-10-29 |