Total CVEs

150,100

Critical Severity

4,928

High Severity

17,435

Last 7 Days

1,801
Quick preset (or use dates below)
Clear Filters
๐Ÿ“… Showing Year: 2026 (January 1 - December 31, 2026) View All Years โ†’
Showing 27,181 - 27,200 of 46,505 CVEs
CVE-2026-33116 HIGH - 7.5

Loop with unreachable exit condition ('infinite loop') in .NET, .NET Framework, Visual Studio allows an unauthorized attacker to deny service over a network.

Vendor: nuget
Product: System.Security.Cryptography.Xml
Published: Apr 14, 2026
Source: NVD
CVE-2026-33115 HIGH - 8.4

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

Published: Apr 14, 2026
Source: NVD
CVE-2026-33114 HIGH - 8.4

Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally.

Published: Apr 14, 2026
Source: NVD
CVE-2026-33104 HIGH - 7.0

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.

Vendor: microsoft
Product: windows_10_1607
Published: Apr 14, 2026
Source: NVD
CVE-2026-33103 MEDIUM - 5.5

Improper access control in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to disclose information locally.

Published: Apr 14, 2026
Source: NVD
CVE-2026-33101 HIGH - 7.8

Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.

Vendor: microsoft
Product: windows_11_24h2
Published: Apr 14, 2026
Source: NVD
CVE-2026-33100 HIGH - 7.0

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

Vendor: microsoft
Product: windows_10_1607
Published: Apr 14, 2026
Source: NVD
CVE-2026-33099 HIGH - 7.0

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

Vendor: microsoft
Product: windows_10_1607
Published: Apr 14, 2026
Source: NVD
CVE-2026-33098 HIGH - 7.8

Use after free in Windows Container Isolation FS Filter Driver allows an authorized attacker to elevate privileges locally.

Vendor: microsoft
Product: windows_10_1607
Published: Apr 14, 2026
Source: NVD
CVE-2026-33096 HIGH - 7.5

Out-of-bounds read in Windows HTTP.sys allows an unauthorized attacker to deny service over a network.

Vendor: microsoft
Product: windows_11_23h2
Published: Apr 14, 2026
Source: NVD
CVE-2026-33095 HIGH - 7.8

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

Published: Apr 14, 2026
Source: NVD
CVE-2026-32226 MEDIUM - 5.9

Concurrent execution using shared resource with improper synchronization ('race condition') in .NET Framework allows an unauthorized attacker to deny service over a network.

Published: Apr 14, 2026
Source: NVD
CVE-2026-32225 HIGH - 8.8

Protection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.

Vendor: microsoft
Product: windows_10_1607
Published: Apr 14, 2026
Source: NVD
CVE-2026-32224 HIGH - 7.0

Use after free in Windows Server Update Service allows an authorized attacker to elevate privileges locally.

Vendor: microsoft
Product: windows_11_26h1
Published: Apr 14, 2026
Source: NVD
CVE-2026-32223 MEDIUM - 6.8

Heap-based buffer overflow in Windows USB Print Driver allows an unauthorized attacker to elevate privileges with a physical attack.

Vendor: microsoft
Product: windows_11_24h2
Published: Apr 14, 2026
Source: NVD
CVE-2026-32222 HIGH - 7.8

Untrusted pointer dereference in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally.

Vendor: microsoft
Product: windows_11_24h2
Published: Apr 14, 2026
Source: NVD
CVE-2026-32221 HIGH - 8.4

Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code locally.

Vendor: microsoft
Product: windows_11_24h2
Published: Apr 14, 2026
Source: NVD
CVE-2026-32220 MEDIUM - 4.4

Improper access control in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to bypass a security feature locally.

Vendor: microsoft
Product: windows_11_24h2
Published: Apr 14, 2026
Source: NVD
CVE-2026-32219 HIGH - 7.0

Double free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.

Vendor: microsoft
Product: windows_11_24h2
Published: Apr 14, 2026
Source: NVD
CVE-2026-32218 MEDIUM - 5.5

Insertion of sensitive information into log file in Windows Kernel allows an authorized attacker to disclose information locally.

Vendor: microsoft
Product: windows_10_21h2
Published: Apr 14, 2026
Source: NVD