Total CVEs

150,703

Critical Severity

4,956

High Severity

17,517

Last 7 Days

2,024
Quick preset (or use dates below)
Clear Filters
๐Ÿ“… Showing Year: 2026 (January 1 - December 31, 2026) View All Years โ†’
Showing 27,781 - 27,800 of 47,108 CVEs
CVE-2026-33824 CRITICAL - 9.8

Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network.

Vendor: microsoft
Product: windows_10_1607
Published: Apr 14, 2026
Source: NVD
CVE-2026-33822 MEDIUM - 6.1

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

Published: Apr 14, 2026
Source: NVD
CVE-2026-33120 HIGH - 8.8

Untrusted pointer dereference in SQL Server allows an authorized attacker to execute code over a network.

Published: Apr 14, 2026
Source: NVD
CVE-2026-33116 HIGH - 7.5

Loop with unreachable exit condition ('infinite loop') in .NET, .NET Framework, Visual Studio allows an unauthorized attacker to deny service over a network.

Vendor: nuget
Product: System.Security.Cryptography.Xml
Published: Apr 14, 2026
Source: NVD
CVE-2026-33115 HIGH - 8.4

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

Published: Apr 14, 2026
Source: NVD
CVE-2026-33114 HIGH - 8.4

Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally.

Published: Apr 14, 2026
Source: NVD
CVE-2026-33104 HIGH - 7.0

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.

Vendor: microsoft
Product: windows_10_1607
Published: Apr 14, 2026
Source: NVD
CVE-2026-33103 MEDIUM - 5.5

Improper access control in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to disclose information locally.

Published: Apr 14, 2026
Source: NVD
CVE-2026-33101 HIGH - 7.8

Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.

Vendor: microsoft
Product: windows_11_24h2
Published: Apr 14, 2026
Source: NVD
CVE-2026-33100 HIGH - 7.0

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

Vendor: microsoft
Product: windows_10_1607
Published: Apr 14, 2026
Source: NVD
CVE-2026-33099 HIGH - 7.0

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

Vendor: microsoft
Product: windows_10_1607
Published: Apr 14, 2026
Source: NVD
CVE-2026-33098 HIGH - 7.8

Use after free in Windows Container Isolation FS Filter Driver allows an authorized attacker to elevate privileges locally.

Vendor: microsoft
Product: windows_10_1607
Published: Apr 14, 2026
Source: NVD
CVE-2026-33096 HIGH - 7.5

Out-of-bounds read in Windows HTTP.sys allows an unauthorized attacker to deny service over a network.

Vendor: microsoft
Product: windows_11_23h2
Published: Apr 14, 2026
Source: NVD
CVE-2026-33095 HIGH - 7.8

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

Published: Apr 14, 2026
Source: NVD
CVE-2026-32226 MEDIUM - 5.9

Concurrent execution using shared resource with improper synchronization ('race condition') in .NET Framework allows an unauthorized attacker to deny service over a network.

Published: Apr 14, 2026
Source: NVD
CVE-2026-32225 HIGH - 8.8

Protection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.

Vendor: microsoft
Product: windows_10_1607
Published: Apr 14, 2026
Source: NVD
CVE-2026-32224 HIGH - 7.0

Use after free in Windows Server Update Service allows an authorized attacker to elevate privileges locally.

Vendor: microsoft
Product: windows_11_26h1
Published: Apr 14, 2026
Source: NVD
CVE-2026-32223 MEDIUM - 6.8

Heap-based buffer overflow in Windows USB Print Driver allows an unauthorized attacker to elevate privileges with a physical attack.

Vendor: microsoft
Product: windows_11_24h2
Published: Apr 14, 2026
Source: NVD
CVE-2026-32222 HIGH - 7.8

Untrusted pointer dereference in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally.

Vendor: microsoft
Product: windows_11_24h2
Published: Apr 14, 2026
Source: NVD
CVE-2026-32221 HIGH - 8.4

Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code locally.

Vendor: microsoft
Product: windows_11_24h2
Published: Apr 14, 2026
Source: NVD