LiveActive security incident?Get immediate response

CVE archive

October 2026

Browse CVE records published in October 2026, with severity, affected products, CWE, KEV, and source-backed vulnerability context.

Search all CVEs Known exploited

Showing 50 of 7587 matching CVEs · Page 3 of 152.

High · CVSS 7.8

CVE-2026-96118: Windows Graphics Kernel Elevation of Privilege Vulnerability

Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

Published Oct 13, 2026 · Updated Oct 14, 2026

High · CVSS 7.5

CVE-2026-96071: Windows Media Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network.

Published Oct 13, 2026 · Updated Oct 14, 2026

High · CVSS 8.8

CVE-2026-97745: Microsoft Office Excel Remote Code Execution Vulnerability

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Published Oct 13, 2026 · Updated Oct 14, 2026

High · CVSS 8.8

CVE-2026-97768: Microsoft Office Excel Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Published Oct 13, 2026 · Updated Oct 14, 2026

High · CVSS 8.8

CVE-2026-97772: Microsoft Office Excel Remote Code Execution Vulnerability

Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Published Oct 13, 2026 · Updated Oct 14, 2026

High · CVSS 8.8

CVE-2026-97775: Microsoft Office Excel Remote Code Execution Vulnerability

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Published Oct 13, 2026 · Updated Oct 14, 2026

High · CVSS 8.8

CVE-2026-97763: Microsoft Office Excel Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Published Oct 13, 2026 · Updated Oct 14, 2026

High · CVSS 8.8

CVE-2026-97741: Microsoft Office Excel Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Published Oct 13, 2026 · Updated Oct 14, 2026

High · CVSS 8.8

CVE-2026-97004: Microsoft Office Excel Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Published Oct 13, 2026 · Updated Oct 14, 2026

High · CVSS 8.8

CVE-2026-97746: Microsoft Office Excel Remote Code Execution Vulnerability

Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Published Oct 13, 2026 · Updated Oct 14, 2026

Medium · CVSS 6.5

CVE-2026-97760: Microsoft Office Excel Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

Published Oct 13, 2026 · Updated Oct 14, 2026

High · CVSS 8.8

CVE-2026-97742: Microsoft Office Excel Remote Code Execution Vulnerability

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Published Oct 13, 2026 · Updated Oct 14, 2026

High · CVSS 8.8

CVE-2026-97738: Microsoft Office Excel Remote Code Execution Vulnerability

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Published Oct 13, 2026 · Updated Oct 14, 2026

High · CVSS 8.8

CVE-2026-97757: Microsoft Office Excel Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Published Oct 13, 2026 · Updated Oct 14, 2026

High · CVSS 8.8

CVE-2026-97011: Microsoft Office Excel Remote Code Execution Vulnerability

Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Published Oct 13, 2026 · Updated Oct 14, 2026

High · CVSS 8.8

CVE-2026-97762: Microsoft Office Excel Remote Code Execution Vulnerability

Out-of-bounds write in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Published Oct 13, 2026 · Updated Oct 14, 2026

High · CVSS 8.8

CVE-2026-97777: Microsoft Office Excel Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Published Oct 13, 2026 · Updated Oct 14, 2026

Medium · CVSS 6.5

CVE-2026-97743: Microsoft Office Excel Information Disclosure Vulnerability

Use after free in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

Published Oct 13, 2026 · Updated Oct 14, 2026

High · CVSS 8.8

CVE-2026-97010: Microsoft Office Excel Remote Code Execution Vulnerability

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Published Oct 13, 2026 · Updated Oct 14, 2026

High · CVSS 8.8

CVE-2026-97773: Microsoft Office Excel Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Published Oct 13, 2026 · Updated Oct 14, 2026

High · CVSS 8.8

CVE-2026-97769: Microsoft Office Excel Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Published Oct 13, 2026 · Updated Oct 14, 2026

High · CVSS 8.8

CVE-2026-97008: Microsoft Office Excel Remote Code Execution Vulnerability

Buffer underwrite ('buffer underflow') in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Published Oct 13, 2026 · Updated Oct 14, 2026

High · CVSS 8.8

CVE-2026-97756: Microsoft Office Excel Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Published Oct 13, 2026 · Updated Oct 14, 2026

Medium · CVSS 6.5

CVE-2026-97779: Microsoft Office Excel Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

Published Oct 13, 2026 · Updated Oct 14, 2026

High · CVSS 8.8

CVE-2026-97007: Microsoft Office Excel Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Published Oct 13, 2026 · Updated Oct 14, 2026

High · CVSS 8.8

CVE-2026-97748: Microsoft Office Excel Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Published Oct 13, 2026 · Updated Oct 14, 2026

High · CVSS 7.5

CVE-2026-96960: .NET Denial of Service Vulnerability

Asymmetric resource consumption (amplification) in .NET allows an unauthorized attacker to deny service over a network.

Published Oct 13, 2026 · Updated Oct 14, 2026

High · CVSS 7.5

CVE-2026-96959: .NET Denial of Service Vulnerability

Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.

Published Oct 13, 2026 · Updated Oct 14, 2026

High · CVSS 7.5

CVE-2026-96958: .NET Denial of Service Vulnerability

Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.

Published Oct 13, 2026 · Updated Oct 14, 2026

High · CVSS 8.8

CVE-2026-96957: .NET Security Feature Bypass Vulnerability

Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.

Published Oct 13, 2026 · Updated Oct 14, 2026

High · CVSS 7

CVE-2026-95943: Connected Devices Platform Service (Cdpsvc) Elevation of Privilege Vulnerability

Double free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.

Published Oct 13, 2026 · Updated Oct 14, 2026

High · CVSS 8.8

CVE-2026-96952: Microsoft Windows Media Foundation Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.

Published Oct 13, 2026 · Updated Oct 14, 2026

High · CVSS 7.8

CVE-2026-96953: Windows Universal Disk Format File System Driver (UDFS) Remote Code Execution Vulnerability

Null pointer dereference in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to execute code locally.

Published Oct 13, 2026 · Updated Oct 14, 2026

High · CVSS 8.8 · CISA KEV

CVE-2026-96951: Windows Shell Security Feature Bypass Vulnerability

Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.

Published Oct 13, 2026 · Updated Oct 14, 2026

High · CVSS 7.8

CVE-2026-96950: Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.

Published Oct 13, 2026 · Updated Oct 14, 2026

High · CVSS 7

CVE-2026-96949: Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.

Published Oct 13, 2026 · Updated Oct 14, 2026

Medium · CVSS 5.5

CVE-2026-96948: Windows Client Side Caching driver (csc.sys) Information Disclosure Vulnerability

Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver (csc.sys) allows an authorized attacker to disclose information locally.

Published Oct 13, 2026 · Updated Oct 14, 2026

High · CVSS 7.8

CVE-2026-96947: Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.

Published Oct 13, 2026 · Updated Oct 14, 2026

High · CVSS 7.8

CVE-2026-96946: Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.

Published Oct 13, 2026 · Updated Oct 14, 2026

High · CVSS 7.5

CVE-2026-96945: Windows Failover Cluster Denial of Service Vulnerability

Uncaught exception in Windows Failover Cluster allows an unauthorized attacker to deny service over a network.

Published Oct 13, 2026 · Updated Oct 14, 2026

Medium · CVSS 5.5

CVE-2026-96944: Windows Storage Information Disclosure Vulnerability

Insertion of sensitive information into externally-accessible file or directory in Windows Storage allows an authorized attacker to disclose information locally.

Published Oct 13, 2026 · Updated Oct 14, 2026

High · CVSS 8.8

CVE-2026-96202: Windows Raw Image Extension Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network.

Published Oct 13, 2026 · Updated Oct 14, 2026

High · CVSS 8.1

CVE-2026-88094: Azure Storage Library Elevation of Privilege Vulnerability

Improper neutralization of special elements in output used by a downstream component ('injection') in Azure Storage Library allows an authorized attacker to elevate privileges over a network.

Published Oct 13, 2026 · Updated Oct 14, 2026

High · CVSS 7

CVE-2026-96939: Servicing Stack Updates Elevation of Privilege Vulnerability

Time-of-check time-of-use (toctou) race condition in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.

Published Oct 13, 2026 · Updated Oct 14, 2026

Medium · CVSS 6.7

CVE-2026-96938: Windows Distributed File System (DFS) Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to elevate privileges locally.

Published Oct 13, 2026 · Updated Oct 14, 2026

High · CVSS 7

CVE-2026-96937: Microsoft Windows Search Component Elevation of Privilege Vulnerability

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

Published Oct 13, 2026 · Updated Oct 14, 2026

Medium · CVSS 4.7

CVE-2026-85866: Windows ALPC Information Disclosure Vulnerability

Exposure of sensitive system information to an unauthorized control sphere in Windows ALPC allows an authorized attacker to disclose information locally.

Published Oct 13, 2026 · Updated Oct 14, 2026

Medium · CVSS 5.5

CVE-2026-69675: Windows Network File System Information Disclosure Vulnerability

Out-of-bounds read in Windows Network File System allows an authorized attacker to disclose information locally.

Published Oct 13, 2026 · Updated Oct 14, 2026

Medium · CVSS 5.5

CVE-2026-96926: Role: DNS Server Tampering Vulnerability

Missing authorization in DNS Server allows an authorized attacker to perform tampering locally.

Published Oct 13, 2026 · Updated Oct 14, 2026

High · CVSS 7.8

CVE-2026-96929: Windows Kernel Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

Published Oct 13, 2026 · Updated Oct 14, 2026