Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-83918 | high | 7.8 | No | Integer overflow or wraparound in Windows Kernel allows an authorized attacker to elevate privileges locally. | 2026-10-29 |
| CVE-2026-83919 | high | 7.8 | No | Heap-based buffer overflow in Microsoft Internet Messaging API allows an authorized attacker to execute code locally. | 2026-10-29 |
| CVE-2026-83920 | high | 7.8 | No | Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. | 2026-10-29 |
| CVE-2026-83921 | high | 7.0 | No | Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. | 2026-10-29 |
| CVE-2026-83922 | high | 7.8 | No | Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally. | 2026-10-29 |
| CVE-2026-83569 | high | 7.8 | No | Heap-based buffer overflow in HID Parser Library allows an authorized attacker to elevate privileges locally. | 2026-10-29 |
| CVE-2026-70110 | high | 7.8 | No | Stack-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally. | 2026-10-29 |
| CVE-2026-83759 | high | 8.8 | No | Improper control of generation of code ('code injection') in Windows Encrypting File System (EFS) allows an authorized attacker to execute c... | 2026-10-29 |
| CVE-2026-70109 | high | 7.8 | No | Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally. | 2026-10-29 |
| CVE-2026-85318 | high | 7.8 | No | Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally. | 2026-10-29 |
| CVE-2026-83762 | high | 7.8 | No | Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. | 2026-10-29 |
| CVE-2026-83763 | high | 7.8 | No | Access of resource using incompatible type ('type confusion') in Windows Input System allows an authorized attacker to elevate privileges lo... | 2026-10-29 |
| CVE-2026-85319 | high | 7.5 | No | Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny... | 2026-10-29 |
| CVE-2026-83764 | medium | 5.5 | No | Incorrect authorization in Windows Clipboard User Service allows an authorized attacker to disclose information locally. | 2026-10-29 |
| CVE-2026-83518 | high | 7.8 | No | Heap-based buffer overflow in RPC Runtime allows an authorized attacker to elevate privileges locally. | 2026-10-29 |
| CVE-2026-83515 | high | 7.5 | No | Use of uninitialized resource in RPC Runtime allows an unauthorized attacker to disclose information over a network. | 2026-10-29 |
| CVE-2026-85320 | medium | 5.5 | No | Use of uninitialized resource in Windows Print Spooler Components allows an authorized attacker to disclose information locally. | 2026-10-29 |
| CVE-2026-19603 | medium | 4.3 | No | Mattermost versions 11.9.x | 2026-10-29 |
| CVE-2026-19867 | medium | 4.3 | No | Mattermost versions 11.10.x | 2026-10-29 |
| CVE-2026-16251 | medium | 6.5 | No | Mattermost versions 11.10.x | 2026-10-29 |