Priority MEDIUM 42
Improper resolution of path equivalence in Windows SmartScreen allows an unauthorized attacker to bypass a security feature over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00974 · Published 2026-10-13 · Fixed in 10.0.26100.9711, 10.0.26200.9711 +2 CWE-41
Priority LOW 36
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00365 · Published 2026-10-13 · Fixed in 10.0.14393.9612, 10.0.17763.9376 +11 CWE-416
Priority LOW 33
Improper link resolution before file access ('link following') in Windows Backup Engine allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.003 · Published 2026-10-13 · Fixed in 10.0.19044.7807, 10.0.19045.7807 +5 CWE-59
Priority LOW 33
Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00279 · Published 2026-10-13 · Fixed in 10.0.26100.9711, 10.0.26200.9711 +1 CWE-416
Priority LOW 36
Heap-based buffer overflow in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00367 · Published 2026-10-13 · Fixed in 10.0.26100.9711, 10.0.26200.9711 +3 CWE-122
Priority LOW 31
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01079 · Published 2026-10-13 · Fixed in 10.0.14393.9612, 10.0.17763.9376 +11 CWE-125
Priority LOW 31
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01079 · Published 2026-10-13 · Fixed in 10.0.14393.9612, 10.0.17763.9376 +11 CWE-125
Priority LOW 31
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01079 · Published 2026-10-13 · Fixed in 10.0.14393.9612, 10.0.17763.9376 +11 CWE-125
Priority LOW 31
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00907 · Published 2026-10-13 · Fixed in 10.0.14393.9612, 10.0.17763.9376 +11 CWE-125
Priority LOW 31
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00907 · Published 2026-10-13 · Fixed in 10.0.14393.9612, 10.0.17763.9376 +11 CWE-125
Priority LOW 30
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00776 · Published 2026-10-13 · Fixed in 10.0.14393.9612, 10.0.17763.9376 +11 CWE-125
Priority LOW 31
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00925 · Published 2026-10-13 · Fixed in 10.0.14393.9612, 10.0.17763.9376 +11 CWE-125
Priority LOW 31
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00925 · Published 2026-10-13 · Fixed in 10.0.14393.9612, 10.0.17763.9376 +11 CWE-125
Priority LOW 31
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00925 · Published 2026-10-13 · Fixed in 10.0.14393.9612, 10.0.17763.9376 +11 CWE-125
Priority LOW 31
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00925 · Published 2026-10-13 · Fixed in 10.0.14393.9612, 10.0.17763.9376 +11 CWE-125
Priority LOW 31
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00925 · Published 2026-10-13 · Fixed in 10.0.14393.9612, 10.0.17763.9376 +11 CWE-125
Priority LOW 31
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00925 · Published 2026-10-13 · Fixed in 10.0.14393.9612, 10.0.17763.9376 +11 CWE-125
Priority LOW 31
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00925 · Published 2026-10-13 · Fixed in 10.0.14393.9612, 10.0.17763.9376 +11 CWE-125
Priority LOW 30
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00792 · Published 2026-10-13 · Fixed in 10.0.14393.9612, 10.0.17763.9376 +11 CWE-125
Priority LOW 30
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00792 · Published 2026-10-13 · Fixed in 10.0.14393.9612, 10.0.17763.9376 +11 CWE-125
Priority LOW 30
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00792 · Published 2026-10-13 · Fixed in 10.0.14393.9612, 10.0.17763.9376 +11 CWE-125
Priority LOW 31
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00907 · Published 2026-10-13 · Fixed in 10.0.14393.9612, 10.0.17763.9376 +11 CWE-125
Priority MEDIUM 41
Double free in Windows Internet Information Services allows an unauthorized attacker to deny service over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01073 · Published 2026-10-13 · Fixed in 10.0.22631.7652, 10.0.26100.9711 +5 CWE-415
Priority LOW 31
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.0095 · Published 2026-10-13 · Fixed in 10.0.14393.9612, 10.0.17763.9376 +11 CWE-125
Priority LOW 31
Buffer over-read in DNS Server allows an authorized attacker to disclose information over a network.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.0095 · Published 2026-10-13 · Fixed in 10.0.14393.9612, 10.0.17763.9376 +11 CWE-126
Load more
THREATIST.IORead the docs