By publication date

Exploited and new serious CVEs: October 2026

8,750 records · 22 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 29 of 88

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
31Monitor	CVE-2026-105003No exploit	HID Class Driver Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 Local privilege escalation Memory safety	High7.8	—	0.3%	Oct 13, 2026
31Monitor	CVE-2026-105004No exploit	Windows Overlay Filter Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-125 Local privilege escalation Memory safety	High7.8	—	0.3%	Oct 13, 2026
32Monitor	CVE-2026-105005No exploit	Windows Schannel Remote Code Execution Vulnerabilitymicrosoft · windows 11 26h1 · CWE-787 pre-auth RCE Memory safety	High8.1	—	0.7%	Oct 13, 2026
35Monitor	CVE-2026-105007No exploit	Windows NDIS Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-125 Pre-auth Memory safety	High8.8	—	0.8%	Oct 13, 2026
36Monitor	CVE-2026-105008No exploit	Windows Schannel Spoofing Vulnerabilitymicrosoft · windows 10 1607 · CWE-420 Pre-auth	Critical9.0	—	0.6%	Oct 13, 2026
30Monitor	CVE-2026-105009No exploit	Windows Server Update Service Elevation of Privilege Vulnerabilitymicrosoft · windows server 2012 · CWE-276 Local privilege escalation	High7.5	—	0.3%	Oct 13, 2026
39Monitor	CVE-2026-105010No exploit	Microsoft Windows Search Component Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-416 Pre-auth Memory safety	Critical9.8	—	0.9%	Oct 13, 2026
29Monitor	CVE-2026-105013No exploit	Microsoft Office SharePoint Remote Code Execution Vulnerabilitymicrosoft · sharepoint server · CWE-502 RCE Deserialization	High7.4	—	0.9%	Oct 13, 2026
39Monitor	CVE-2026-105016No exploit	Microsoft QUIC Remote Code Execution Vulnerabilitymicrosoft · .net 10.0 · CWE-122 pre-auth RCE Memory safety	Critical9.8	—	1.6%	Oct 13, 2026
35Monitor	CVE-2026-105591No exploit	Microsoft Office Access Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-122 pre-auth RCE Memory safety	High8.8	—	0.8%	Oct 13, 2026
30Monitor	CVE-2026-105592No exploit	Microsoft Office Access Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-122 pre-auth RCE Memory safety	High7.5	—	0.6%	Oct 13, 2026
35Monitor	CVE-2026-105593No exploit	Microsoft Office Access Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-122 pre-auth RCE Memory safety	High8.8	—	0.8%	Oct 13, 2026
35Monitor	CVE-2026-105595No exploit	Microsoft Office Access Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-125 pre-auth RCE Memory safety	High8.8	—	0.8%	Oct 13, 2026
35Monitor	CVE-2026-105596No exploit	Microsoft Office Access Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-122 pre-auth RCE Memory safety	High8.8	—	0.8%	Oct 13, 2026
35Monitor	CVE-2026-105597No exploit	Microsoft Office Access Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-122 pre-auth RCE Memory safety	High8.8	—	0.8%	Oct 13, 2026
35Monitor	CVE-2026-105598No exploit	Microsoft Office Access Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-122 pre-auth RCE Memory safety	High8.8	—	0.8%	Oct 13, 2026
30Monitor	CVE-2026-105599No exploit	Microsoft Office PowerPoint Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-122 pre-auth RCE Memory safety	High7.5	—	0.6%	Oct 13, 2026
30Monitor	CVE-2026-105714No exploit	Microsoft Office Access Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-122 pre-auth RCE Memory safety	High7.5	—	0.6%	Oct 13, 2026
30Monitor	CVE-2026-105715No exploit	Microsoft Office Word Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-190 pre-auth RCE Memory safety	High7.5	—	0.6%	Oct 13, 2026
35Monitor	CVE-2026-105716No exploit	Microsoft Office Access Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-122 pre-auth RCE Memory safety	High8.8	—	0.8%	Oct 13, 2026
35Monitor	CVE-2026-105717No exploit	Microsoft Office Access Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-20 pre-auth RCE	High8.8	—	0.8%	Oct 13, 2026
35Monitor	CVE-2026-105718No exploit	Microsoft Excel Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-20 pre-auth RCE	High8.8	—	0.9%	Oct 13, 2026
28Monitor	CVE-2026-105722No exploit	Windows Broadcast DVR User Service Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1809 · CWE-416 Local privilege escalation Memory safety	High7.0	—	0.2%	Oct 13, 2026
39Monitor	CVE-2026-105723No exploit	Windows Distributed File System (DFS) Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-822 Pre-auth	Critical9.8	—	1.3%	Oct 13, 2026
28Monitor	CVE-2026-105725No exploit	Windows Security App Elevation of Privilege Vulnerabilitymicrosoft · windows security app · CWE-416 Local privilege escalation Memory safety	High7.0	—	0.2%	Oct 13, 2026
35Monitor	CVE-2026-105727No exploit	Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerabilitymicrosoft · microsoft dynamics nav 2018 · CWE-22 Path traversal	High8.8	—	1.0%	Oct 13, 2026
30Monitor	CVE-2026-105728No exploit	Dynamics Business Central Information Disclosure Vulnerabilitymicrosoft · microsoft dynamics nav 2018 · CWE-306 Pre-auth Auth bypass	High7.5	—	0.9%	Oct 13, 2026
28Monitor	CVE-2026-105729No exploit	SysInternals Elevation of Privilege Vulnerabilitymicrosoft · windows sysinternals process monitor · CWE-822 Local privilege escalation	High7.1	—	0.3%	Oct 13, 2026
29Monitor	CVE-2026-105732No exploit	SysInternals Elevation of Privilege Vulnerabilitymicrosoft · sysinternals suite · CWE-121 Local privilege escalation Memory safety	High7.3	—	0.4%	Oct 13, 2026
35Monitor	CVE-2026-105733No exploit	Windows Hyper-V Remote Code Execution Vulnerabilitymicrosoft · windows 10 21h2 · CWE-863 RCE Broken access control (IDOR)	High8.8	—	0.3%	Oct 13, 2026
31Monitor	CVE-2026-106625No exploit	Adobe Framemaker \| Out-of-bounds Write (CWE-787)adobe · framemaker · CWE-787 RCE Memory safety	High7.8	—	0.1%	Oct 13, 2026
31Monitor	CVE-2026-108130No exploit	Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerabilitymicrosoft · windows 11 24h2 · CWE-122 Local privilege escalation Memory safety	High7.8	—	0.3%	Oct 13, 2026
30Monitor	CVE-2026-108131No exploit	Active Directory Federation Services (AD FS) Spoofing Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-295 Pre-auth Weak crypto	High7.5	—	0.8%	Oct 13, 2026
28Monitor	CVE-2026-108132No exploit	Windows Kerberos Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-415 Local privilege escalation Memory safety	High7.0	—	0.2%	Oct 13, 2026
31Monitor	CVE-2026-108133No exploit	Windows Modern Device Management (MDM) Elevation of Privilege Vulnerabilitymicrosoft · windows server 2022 · CWE-763 Local privilege escalation	High7.8	—	0.3%	Oct 13, 2026
28Monitor	CVE-2026-108134No exploit	Windows Autopilot Elevation of Privilege Vulnerabilitymicrosoft · windows 11 24h2 · CWE-416 Local privilege escalation Memory safety	High7.0	—	0.2%	Oct 13, 2026
28Monitor	CVE-2026-108135No exploit	Windows Backup Engine Elevation of Privilege Vulnerabilitymicrosoft · windows 10 21h2 · CWE-59 Local privilege escalation	High7.0	—	0.3%	Oct 13, 2026
31Monitor	CVE-2026-108136No exploit	Microsoft Windows Search Component Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-416 Local privilege escalation Memory safety	High7.8	—	0.3%	Oct 13, 2026
28Monitor	CVE-2026-108396No exploit	Windows Modern Device Management (MDM) Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1809 · CWE-367 Local privilege escalation Race condition	High7.0	—	0.2%	Oct 13, 2026
35Monitor	CVE-2026-108398No exploit	.NET Framework Security Feature Bypass Vulnerabilitymicrosoft · microsoft .net framework 3.5 and 4.6.2/4.7/4.7.1/4.7.2 · CWE-426	High8.8	—	0.7%	Oct 13, 2026
28Monitor	CVE-2026-108399No exploit	Windows Hyper-V Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 Local privilege escalation Memory safety	High7.2	—	0.3%	Oct 13, 2026
35Monitor	CVE-2026-108400No exploit	HEVC Video Extensions Remote Code Execution Vulnerabilitymicrosoft · hevc video extensions · CWE-190 pre-auth RCE Memory safety	High8.8	—	0.9%	Oct 13, 2026
32Monitor	CVE-2026-108457No exploit	Microsoft Windows PDF Remote Code Execution Vulnerabilitymicrosoft · windows 10 21h2 · CWE-787 pre-auth RCE Memory safety	High8.1	—	0.7%	Oct 13, 2026
35Monitor	CVE-2026-108458No exploit	Remote Desktop Client Remote Code Execution Vulnerabilitymicrosoft · windows 10 1607 · CWE-416 pre-auth RCE Memory safety	High8.8	—	0.8%	Oct 13, 2026
32Monitor	CVE-2026-108460No exploit	Windows Message Queuing Remote Code Execution Vulnerabilitymicrosoft · windows 10 1607 · CWE-416 pre-auth RCE Memory safety	High8.1	—	0.7%	Oct 13, 2026
28Monitor	CVE-2026-108461No exploit	Windows Broadcast DVR User Service Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1809 · CWE-416 Local privilege escalation Memory safety	High7.0	—	0.2%	Oct 13, 2026
35Monitor	CVE-2026-108463No exploit	Windows SmartScreen Security Feature Bypass Vulnerabilitymicrosoft · windows 11 24h2 · CWE-41 Pre-auth	High8.8	—	0.9%	Oct 13, 2026
28Monitor	CVE-2026-108464No exploit	Software Protection Platform (SPP) Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-416 Local privilege escalation Memory safety	High7.0	—	0.2%	Oct 13, 2026
28Monitor	CVE-2026-108465No exploit	Windows Update Delivery Optimization Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1809 · CWE-416 Local privilege escalation Memory safety	High7.0	—	0.2%	Oct 13, 2026
35Monitor	CVE-2026-108467No exploit	Microsoft PostScript Printer Driver Remote Code Execution Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 RCE Memory safety	High8.8	—	1.0%	Oct 13, 2026
28Monitor	CVE-2026-108468No exploit	Windows Installer Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-416 Local privilege escalation Memory safety	High7.0	—	0.2%	Oct 13, 2026
35Monitor	CVE-2026-108471No exploit	Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1809 · CWE-184 Local privilege escalation	High8.8	—	0.3%	Oct 13, 2026
34Monitor	CVE-2026-109428No exploit	Mistral Vibe < 2.25.5 Permission Bypass via Bash Line Continuationmistralai · mistral-vibe · CWE-436 Pre-auth	High8.7	—	0.5%	Oct 13, 2026
34Monitor	CVE-2026-109429No exploit	Mistral Vibe < 2.25.4 Bash Permission Bypass via ${var@P} Prompt-Transformmistralai · mistral-vibe · CWE-436 pre-auth RCE	High8.7	—	0.5%	Oct 13, 2026
28Monitor	CVE-2026-109453No exploit	Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 Local privilege escalation Memory safety	High7.0	—	0.2%	Oct 13, 2026
30Monitor	CVE-2026-110111No exploit	Xen Orchestra before 6.9.0 Privilege Escalation via Prototype Pollution in vm.importFromEsxivatesfr · xen-orchestra · CWE-1321 RCE Prototype pollution	High7.7	—	0.6%	Oct 13, 2026
36Monitor	CVE-2026-110112No exploit	Dockhand before 1.0.50 OIDC Privilege Escalation via Missing Token Claim Validationfinsys · dockhand · CWE-863 Pre-auth Broken access control (IDOR)	Critical9.2	—	0.3%	Oct 13, 2026
40Plan	CVE-2026-110130No exploit	Dockhand before 1.0.45 Authentication Bypass via Static-Asset Checkfinsys · dockhand · CWE-288 Pre-auth Auth bypass	Critical10.0	—	0.7%	Oct 13, 2026
30Monitor	CVE-2026-110202No exploit	Roo-Code through 3.54.0 Auto-Approve Bypass via Redirect Operator Strippingroocode · roo code · CWE-436 Pre-auth	High7.7	—	0.4%	Oct 13, 2026
30Monitor	CVE-2026-110203No exploit	Roo-Code through 3.54.0 Auto-Approve Bypass via Quote Masking Desynchronizationroocode · roo code · CWE-436 Pre-auth	High7.7	—	0.5%	Oct 13, 2026
30Monitor	CVE-2026-110204No exploit	Roo-Code through 3.54.0 Auto-Approve Bypass via Funsub Command Substitutionroocode · roo code · CWE-436 Pre-auth	High7.7	—	0.5%	Oct 13, 2026
30Monitor	CVE-2026-110205No exploit	Roo-Code through 3.54.0 Auto-Approve Bypass via Glob Token Discarding Command Substitutionroocode · roo code · CWE-184 Pre-auth	High7.7	—	0.5%	Oct 13, 2026
30Monitor	CVE-2026-110206No exploit	Roo-Code through 3.54.0 Auto-Approve Bypass via Command Substitution at Command Positionroocode · roo code · CWE-436 Pre-auth	High7.7	—	0.5%	Oct 13, 2026
34Monitor	CVE-2026-110207No exploit	Wukong AICRM through 20260610 Missing Authorization in User and Role Management APIswukongopensource · wukong aicrm · CWE-862 Broken access control (IDOR)	High8.7	—	0.4%	Oct 13, 2026
28Monitor	CVE-2026-110208No exploit	Wukong AICRM through 20260610 Missing Authorization in System Configuration APIs Exposes Stored AI Provider Keyswukongopensource · wukong aicrm · CWE-862 Broken access control (IDOR)	High7.1	—	0.3%	Oct 13, 2026
28Monitor	CVE-2026-110209No exploit	ai-fusion-video through 1.2.0 Missing Authorization in Configuration Read Endpoints Exposes Stored Credentialsstonewuu · ai-fusion-video · CWE-862 Broken access control (IDOR)	High7.1	—	0.4%	Oct 13, 2026
28Monitor	CVE-2026-110211No exploit	SkillHub through 0.2.22 Missing Authorization in CLI Skill Delete Endpointiflytek · skillhub · CWE-862 Broken access control (IDOR)	High7.2	—	0.4%	Oct 13, 2026
34Monitor	CVE-2026-110215No exploit	youlai-boot through 2.21.1 Missing Authorization in Role Menu Assignment Allows Privilege Escalationyoulaitech · youlai-boot · CWE-862 Broken access control (IDOR)	High8.7	—	0.4%	Oct 13, 2026
28Monitor	CVE-2026-110216No exploit	youlai-boot through 2.21.1 Missing Authorization in User Status Update Endpointyoulaitech · youlai-boot · CWE-862 Broken access control (IDOR)	High7.1	—	0.4%	Oct 13, 2026
28Monitor	CVE-2026-110217No exploit	vhr through commit 03abbd3 Information Disclosure of Operator Password Hashes via GET /chat/hrslenve · vhr · CWE-200 Info leak	High7.1	—	0.5%	Oct 13, 2026
28Monitor	CVE-2026-110220No exploit	Kubeflow Model Registry through 0.3.17 SSRF via InferenceService Controller URL Annotationkubeflow · model registry · CWE-918 SSRF	High7.1	—	0.3%	Oct 13, 2026
33Monitor	CVE-2026-110233No exploit	rovr through 0.10.3 OS Command Injection via Unquoted Path to cmd.exenspc911 · rovr · CWE-78 RCE Local privilege escalation Command injection	High8.4	—	1.1%	Oct 13, 2026
28Monitor	CVE-2026-110236No exploit	KDE Dolphin 24.08.0 through 26.08.2 OS Command Injection via Crafted Folder Namekde · dolphin · CWE-78 RCE Command injection	High7.1	—	1.0%	Oct 13, 2026
28Monitor	CVE-2026-110237No exploit	Vifm 0.8.1-beta through 0.14.4 Unverified IPC FIFO Ownership Allows Cross-User Command Executionvifm · vifm · CWE-283 RCE Local privilege escalation	High7.0	—	0.1%	Oct 13, 2026
34Monitor	CVE-2026-110238No exploit	Rapyd Admin 9.0.0 before 9.20.0 Authorization Bypass via UsersModalEditEmbed Componentzofe · rapyd-admin · CWE-639 Broken access control (IDOR)	High8.7	—	0.4%	Oct 13, 2026
33Monitor	CVE-2026-110247No exploit	Integer overflow in libmime buffer growth could lead to heap corruptionmozilla · thunderbird · CWE-190 Memory safety	High8.4	—	0.1%	Oct 13, 2026
34Monitor	CVE-2026-110249No exploit	Denial-of-service in the Exchange email componentmozilla · thunderbird · CWE-400 Denial of service	High8.6	—	0.1%	Oct 13, 2026
33Monitor	CVE-2026-110255No exploit	Dockhand before 1.0.43 SSRF via /api/templates/compose Endpointfinsys · dockhand · CWE-918 SSRF	High8.4	—	0.2%	Oct 13, 2026
31Monitor	CVE-2026-49785No exploit	UEFI Secure Boot Security Feature Bypass Vulnerabilitymicrosoft · windows 10 1607 · CWE-404	High7.8	—	0.3%	Oct 13, 2026
30Monitor	CVE-2026-58280No exploit	.NET Denial of Service Vulnerabilitymicrosoft · .net 10.0 · CWE-674 Pre-auth Denial of service	High7.5	—	1.2%	Oct 13, 2026
31Monitor	CVE-2026-61931No exploit	Windows Perception Simulation Service Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1809 · CWE-416 Local privilege escalation Memory safety	High7.8	—	0.3%	Oct 13, 2026
31Monitor	CVE-2026-68836No exploit	Windows kernel32.dll Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 Local privilege escalation Memory safety	High7.8	—	0.3%	Oct 13, 2026
35Monitor	CVE-2026-69326No exploit	Graphic Fonts Remote Code Execution Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 pre-auth RCE Memory safety	High8.8	—	0.7%	Oct 13, 2026
31Monitor	CVE-2026-69354No exploit	Windows Error Reporting Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 Local privilege escalation Memory safety	High7.8	—	0.3%	Oct 13, 2026
32Monitor	CVE-2026-69363No exploit	Windows Error Reporting Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 Memory safety	High8.0	—	0.7%	Oct 13, 2026
35Monitor	CVE-2026-69370No exploit	Visual Studio Code Remote Code Execution Vulnerabilitymicrosoft · visual studio code · CWE-77 pre-auth RCE Command injection	High8.8	—	0.8%	Oct 13, 2026
28Monitor	CVE-2026-69387No exploit	Windows Error Reporting Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-416 Local privilege escalation Memory safety	High7.0	—	0.3%	Oct 13, 2026
28Monitor	CVE-2026-69452No exploit	Windows Enterprise App Management Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-416 Memory safety	High7.1	—	0.6%	Oct 13, 2026
30Monitor	CVE-2026-69454No exploit	Microsoft Azure Attestation service and Device Health Attestation Service Information Disclosure Vulnerabilitymicrosoft · windows server 2019 · CWE-125 Pre-auth Memory safety	High7.5	—	1.0%	Oct 13, 2026
31Monitor	CVE-2026-69471No exploit	Windows Installer Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 Local privilege escalation Memory safety	High7.8	—	0.3%	Oct 13, 2026
35Monitor	CVE-2026-69521No exploit	Windows iSCSI Remote Code Execution Vulnerabilitymicrosoft · windows 10 1607 · CWE-190 pre-auth RCE Memory safety	High8.8	—	0.7%	Oct 13, 2026
30Monitor	CVE-2026-69577No exploit	Microsoft Azure Attestation service and Device Health Attestation Service Information Disclosure Vulnerabilitymicrosoft · windows server 2019 · CWE-125 Pre-auth Memory safety	High7.5	—	1.0%	Oct 13, 2026
28Monitor	CVE-2026-69596No exploit	Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-416 Local privilege escalation Memory safety	High7.0	—	0.3%	Oct 13, 2026
31Monitor	CVE-2026-69633No exploit	Windows Update Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 Local privilege escalation Memory safety	High7.8	—	0.3%	Oct 13, 2026
39Monitor	CVE-2026-69634No exploit	Windows iSCSI Remote Code Execution Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 pre-auth RCE Memory safety	Critical9.8	—	0.9%	Oct 13, 2026
39Monitor	CVE-2026-69639No exploit	Windows libarchive Remote Code Execution Vulnerabilitymicrosoft · windows 10 1809 · CWE-122 pre-auth RCE Memory safety	Critical9.8	—	0.9%	Oct 13, 2026
31Monitor	CVE-2026-69650No exploit	Windows Key Distribution Center Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-347 Local privilege escalation Weak crypto	High7.8	—	0.2%	Oct 13, 2026
30Monitor	CVE-2026-69651No exploit	.NET Denial of Service Vulnerabilitymicrosoft · .net 10.0 · CWE-407 Pre-auth Denial of service	High7.5	—	1.2%	Oct 13, 2026
31Monitor	CVE-2026-69673No exploit	Windows Update Elevation of Privilege Vulnerabilitymicrosoft · windows 11 23h2 · CWE-59 Local privilege escalation	High7.8	—	0.5%	Oct 13, 2026
39Monitor	CVE-2026-69705No exploit	Windows iSCSI Remote Code Execution Vulnerabilitymicrosoft · windows 10 1607 · CWE-787 pre-auth RCE Memory safety	Critical9.8	—	0.9%	Oct 13, 2026

CVE-2026-105003
31Monitor
HID Class Driver Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Memory safety
microsoft · windows 10 1607Oct 13, 2026
CVE-2026-105004
31Monitor
Windows Overlay Filter Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Memory safety
microsoft · windows 10 1607Oct 13, 2026
CVE-2026-105005
32Monitor
Windows Schannel Remote Code Execution Vulnerability
HighCVSS 8.1No exploitEPSS 0%
- pre-auth RCE
- Memory safety
microsoft · windows 11 26h1Oct 13, 2026
CVE-2026-105007
35Monitor
Windows NDIS Elevation of Privilege Vulnerability
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Memory safety
microsoft · windows 10 1607Oct 13, 2026
CVE-2026-105008
36Monitor
Windows Schannel Spoofing Vulnerability
CriticalCVSS 9.0No exploitEPSS 0%
- Pre-auth
microsoft · windows 10 1607Oct 13, 2026
CVE-2026-105009
30Monitor
Windows Server Update Service Elevation of Privilege Vulnerability
HighCVSS 7.5No exploitEPSS 0%
- Local privilege escalation
microsoft · windows server 2012Oct 13, 2026
CVE-2026-105010
39Monitor
Microsoft Windows Search Component Elevation of Privilege Vulnerability
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Memory safety
microsoft · windows 10 1607Oct 13, 2026
CVE-2026-105013
29Monitor
Microsoft Office SharePoint Remote Code Execution Vulnerability
HighCVSS 7.4No exploitEPSS 0%
- RCE
- Deserialization
microsoft · sharepoint serverOct 13, 2026
CVE-2026-105016
39Monitor
Microsoft QUIC Remote Code Execution Vulnerability
CriticalCVSS 9.8No exploitEPSS 1%
- pre-auth RCE
- Memory safety
microsoft · .net 10.0Oct 13, 2026
CVE-2026-105591
35Monitor
Microsoft Office Access Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
microsoft · 365 appsOct 13, 2026
CVE-2026-105592
30Monitor
Microsoft Office Access Remote Code Execution Vulnerability
HighCVSS 7.5No exploitEPSS 0%
- pre-auth RCE
- Memory safety
microsoft · 365 appsOct 13, 2026
CVE-2026-105593
35Monitor
Microsoft Office Access Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
microsoft · 365 appsOct 13, 2026
CVE-2026-105595
35Monitor
Microsoft Office Access Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
microsoft · 365 appsOct 13, 2026
CVE-2026-105596
35Monitor
Microsoft Office Access Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
microsoft · 365 appsOct 13, 2026
CVE-2026-105597
35Monitor
Microsoft Office Access Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
microsoft · 365 appsOct 13, 2026
CVE-2026-105598
35Monitor
Microsoft Office Access Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
microsoft · 365 appsOct 13, 2026
CVE-2026-105599
30Monitor
Microsoft Office PowerPoint Remote Code Execution Vulnerability
HighCVSS 7.5No exploitEPSS 0%
- pre-auth RCE
- Memory safety
microsoft · 365 appsOct 13, 2026
CVE-2026-105714
30Monitor
Microsoft Office Access Remote Code Execution Vulnerability
HighCVSS 7.5No exploitEPSS 0%
- pre-auth RCE
- Memory safety
microsoft · 365 appsOct 13, 2026
CVE-2026-105715
30Monitor
Microsoft Office Word Remote Code Execution Vulnerability
HighCVSS 7.5No exploitEPSS 0%
- pre-auth RCE
- Memory safety
microsoft · 365 appsOct 13, 2026
CVE-2026-105716
35Monitor
Microsoft Office Access Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
microsoft · 365 appsOct 13, 2026
CVE-2026-105717
35Monitor
Microsoft Office Access Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
microsoft · 365 appsOct 13, 2026
CVE-2026-105718
35Monitor
Microsoft Excel Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
microsoft · 365 appsOct 13, 2026
CVE-2026-105722
28Monitor
Windows Broadcast DVR User Service Elevation of Privilege Vulnerability
HighCVSS 7.0No exploitEPSS 0%
- Local privilege escalation
- Memory safety
microsoft · windows 10 1809Oct 13, 2026
CVE-2026-105723
39Monitor
Windows Distributed File System (DFS) Elevation of Privilege Vulnerability
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
microsoft · windows 10 1607Oct 13, 2026
CVE-2026-105725
28Monitor
Windows Security App Elevation of Privilege Vulnerability
HighCVSS 7.0No exploitEPSS 0%
- Local privilege escalation
- Memory safety
microsoft · windows security appOct 13, 2026
CVE-2026-105727
35Monitor
Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability
HighCVSS 8.8No exploitEPSS 1%
- Path traversal
microsoft · microsoft dynamics nav 2018Oct 13, 2026
CVE-2026-105728
30Monitor
Dynamics Business Central Information Disclosure Vulnerability
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Auth bypass
microsoft · microsoft dynamics nav 2018Oct 13, 2026
CVE-2026-105729
28Monitor
SysInternals Elevation of Privilege Vulnerability
HighCVSS 7.1No exploitEPSS 0%
- Local privilege escalation
microsoft · windows sysinternals process monitorOct 13, 2026
CVE-2026-105732
29Monitor
SysInternals Elevation of Privilege Vulnerability
HighCVSS 7.3No exploitEPSS 0%
- Local privilege escalation
- Memory safety
microsoft · sysinternals suiteOct 13, 2026
CVE-2026-105733
35Monitor
Windows Hyper-V Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%
- RCE
- Broken access control (IDOR)
microsoft · windows 10 21h2Oct 13, 2026
CVE-2026-106625
31Monitor
Adobe Framemaker | Out-of-bounds Write (CWE-787)
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
adobe · framemakerOct 13, 2026
CVE-2026-108130
31Monitor
Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Memory safety
microsoft · windows 11 24h2Oct 13, 2026
CVE-2026-108131
30Monitor
Active Directory Federation Services (AD FS) Spoofing Vulnerability
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Weak crypto
microsoft · windows 10 version 1607Oct 13, 2026
CVE-2026-108132
28Monitor
Windows Kerberos Elevation of Privilege Vulnerability
HighCVSS 7.0No exploitEPSS 0%
- Local privilege escalation
- Memory safety
microsoft · windows 10 1607Oct 13, 2026
CVE-2026-108133
31Monitor
Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
microsoft · windows server 2022Oct 13, 2026
CVE-2026-108134
28Monitor
Windows Autopilot Elevation of Privilege Vulnerability
HighCVSS 7.0No exploitEPSS 0%
- Local privilege escalation
- Memory safety
microsoft · windows 11 24h2Oct 13, 2026
CVE-2026-108135
28Monitor
Windows Backup Engine Elevation of Privilege Vulnerability
HighCVSS 7.0No exploitEPSS 0%
- Local privilege escalation
microsoft · windows 10 21h2Oct 13, 2026
CVE-2026-108136
31Monitor
Microsoft Windows Search Component Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Memory safety
microsoft · windows 10 1607Oct 13, 2026
CVE-2026-108396
28Monitor
Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability
HighCVSS 7.0No exploitEPSS 0%
- Local privilege escalation
- Race condition
microsoft · windows 10 1809Oct 13, 2026
CVE-2026-108398
35Monitor
.NET Framework Security Feature Bypass Vulnerability
HighCVSS 8.8No exploitEPSS 0%
microsoft · microsoft .net framework 3.5 and 4.6.2/4.7/4.7.1/4.7.2Oct 13, 2026
CVE-2026-108399
28Monitor
Windows Hyper-V Elevation of Privilege Vulnerability
HighCVSS 7.2No exploitEPSS 0%
- Local privilege escalation
- Memory safety
microsoft · windows 10 1607Oct 13, 2026
CVE-2026-108400
35Monitor
HEVC Video Extensions Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
microsoft · hevc video extensionsOct 13, 2026
CVE-2026-108457
32Monitor
Microsoft Windows PDF Remote Code Execution Vulnerability
HighCVSS 8.1No exploitEPSS 0%
- pre-auth RCE
- Memory safety
microsoft · windows 10 21h2Oct 13, 2026
CVE-2026-108458
35Monitor
Remote Desktop Client Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
microsoft · windows 10 1607Oct 13, 2026
CVE-2026-108460
32Monitor
Windows Message Queuing Remote Code Execution Vulnerability
HighCVSS 8.1No exploitEPSS 0%
- pre-auth RCE
- Memory safety
microsoft · windows 10 1607Oct 13, 2026
CVE-2026-108461
28Monitor
Windows Broadcast DVR User Service Elevation of Privilege Vulnerability
HighCVSS 7.0No exploitEPSS 0%
- Local privilege escalation
- Memory safety
microsoft · windows 10 1809Oct 13, 2026
CVE-2026-108463
35Monitor
Windows SmartScreen Security Feature Bypass Vulnerability
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
microsoft · windows 11 24h2Oct 13, 2026
CVE-2026-108464
28Monitor
Software Protection Platform (SPP) Elevation of Privilege Vulnerability
HighCVSS 7.0No exploitEPSS 0%
- Local privilege escalation
- Memory safety
microsoft · windows 10 1607Oct 13, 2026
CVE-2026-108465
28Monitor
Windows Update Delivery Optimization Elevation of Privilege Vulnerability
HighCVSS 7.0No exploitEPSS 0%
- Local privilege escalation
- Memory safety
microsoft · windows 10 1809Oct 13, 2026
CVE-2026-108467
35Monitor
Microsoft PostScript Printer Driver Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 1%
- RCE
- Memory safety
microsoft · windows 10 1607Oct 13, 2026
CVE-2026-108468
28Monitor
Windows Installer Elevation of Privilege Vulnerability
HighCVSS 7.0No exploitEPSS 0%
- Local privilege escalation
- Memory safety
microsoft · windows 10 1607Oct 13, 2026
CVE-2026-108471
35Monitor
Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability
HighCVSS 8.8No exploitEPSS 0%
- Local privilege escalation
microsoft · windows 10 1809Oct 13, 2026
CVE-2026-109428
34Monitor
Mistral Vibe < 2.25.5 Permission Bypass via Bash Line Continuation
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
mistralai · mistral-vibeOct 13, 2026
CVE-2026-109429
34Monitor
Mistral Vibe < 2.25.4 Bash Permission Bypass via ${var@P} Prompt-Transform
HighCVSS 8.7No exploitEPSS 0%
- pre-auth RCE
mistralai · mistral-vibeOct 13, 2026
CVE-2026-109453
28Monitor
Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulnerability
HighCVSS 7.0No exploitEPSS 0%
- Local privilege escalation
- Memory safety
microsoft · windows 10 1607Oct 13, 2026
CVE-2026-110111
30Monitor
Xen Orchestra before 6.9.0 Privilege Escalation via Prototype Pollution in vm.importFromEsxi
HighCVSS 7.7No exploitEPSS 0%
- RCE
- Prototype pollution
vatesfr · xen-orchestraOct 13, 2026
CVE-2026-110112
36Monitor
Dockhand before 1.0.50 OIDC Privilege Escalation via Missing Token Claim Validation
CriticalCVSS 9.2No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
finsys · dockhandOct 13, 2026
CVE-2026-110130
40Plan
Dockhand before 1.0.45 Authentication Bypass via Static-Asset Check
CriticalCVSS 10.0No exploitEPSS 0%
- Pre-auth
- Auth bypass
finsys · dockhandOct 13, 2026
CVE-2026-110202
30Monitor
Roo-Code through 3.54.0 Auto-Approve Bypass via Redirect Operator Stripping
HighCVSS 7.7No exploitEPSS 0%
- Pre-auth
roocode · roo codeOct 13, 2026
CVE-2026-110203
30Monitor
Roo-Code through 3.54.0 Auto-Approve Bypass via Quote Masking Desynchronization
HighCVSS 7.7No exploitEPSS 0%
- Pre-auth
roocode · roo codeOct 13, 2026
CVE-2026-110204
30Monitor
Roo-Code through 3.54.0 Auto-Approve Bypass via Funsub Command Substitution
HighCVSS 7.7No exploitEPSS 0%
- Pre-auth
roocode · roo codeOct 13, 2026
CVE-2026-110205
30Monitor
Roo-Code through 3.54.0 Auto-Approve Bypass via Glob Token Discarding Command Substitution
HighCVSS 7.7No exploitEPSS 0%
- Pre-auth
roocode · roo codeOct 13, 2026
CVE-2026-110206
30Monitor
Roo-Code through 3.54.0 Auto-Approve Bypass via Command Substitution at Command Position
HighCVSS 7.7No exploitEPSS 0%
- Pre-auth
roocode · roo codeOct 13, 2026
CVE-2026-110207
34Monitor
Wukong AICRM through 20260610 Missing Authorization in User and Role Management APIs
HighCVSS 8.7No exploitEPSS 0%
- Broken access control (IDOR)
wukongopensource · wukong aicrmOct 13, 2026
CVE-2026-110208
28Monitor
Wukong AICRM through 20260610 Missing Authorization in System Configuration APIs Exposes Stored AI Provider Keys
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
wukongopensource · wukong aicrmOct 13, 2026
CVE-2026-110209
28Monitor
ai-fusion-video through 1.2.0 Missing Authorization in Configuration Read Endpoints Exposes Stored Credentials
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
stonewuu · ai-fusion-videoOct 13, 2026
CVE-2026-110211
28Monitor
SkillHub through 0.2.22 Missing Authorization in CLI Skill Delete Endpoint
HighCVSS 7.2No exploitEPSS 0%
- Broken access control (IDOR)
iflytek · skillhubOct 13, 2026
CVE-2026-110215
34Monitor
youlai-boot through 2.21.1 Missing Authorization in Role Menu Assignment Allows Privilege Escalation
HighCVSS 8.7No exploitEPSS 0%
- Broken access control (IDOR)
youlaitech · youlai-bootOct 13, 2026
CVE-2026-110216
28Monitor
youlai-boot through 2.21.1 Missing Authorization in User Status Update Endpoint
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
youlaitech · youlai-bootOct 13, 2026
CVE-2026-110217
28Monitor
vhr through commit 03abbd3 Information Disclosure of Operator Password Hashes via GET /chat/hrs
HighCVSS 7.1No exploitEPSS 0%
- Info leak
lenve · vhrOct 13, 2026
CVE-2026-110220
28Monitor
Kubeflow Model Registry through 0.3.17 SSRF via InferenceService Controller URL Annotation
HighCVSS 7.1No exploitEPSS 0%
- SSRF
kubeflow · model registryOct 13, 2026
CVE-2026-110233
33Monitor
rovr through 0.10.3 OS Command Injection via Unquoted Path to cmd.exe
HighCVSS 8.4No exploitEPSS 1%
- RCE
- Local privilege escalation
- Command injection
nspc911 · rovrOct 13, 2026
CVE-2026-110236
28Monitor
KDE Dolphin 24.08.0 through 26.08.2 OS Command Injection via Crafted Folder Name
HighCVSS 7.1No exploitEPSS 1%
- RCE
- Command injection
kde · dolphinOct 13, 2026
CVE-2026-110237
28Monitor
Vifm 0.8.1-beta through 0.14.4 Unverified IPC FIFO Ownership Allows Cross-User Command Execution
HighCVSS 7.0No exploitEPSS 0%
- RCE
- Local privilege escalation
vifm · vifmOct 13, 2026
CVE-2026-110238
34Monitor
Rapyd Admin 9.0.0 before 9.20.0 Authorization Bypass via UsersModalEditEmbed Component
HighCVSS 8.7No exploitEPSS 0%
- Broken access control (IDOR)
zofe · rapyd-adminOct 13, 2026
CVE-2026-110247
33Monitor
Integer overflow in libmime buffer growth could lead to heap corruption
HighCVSS 8.4No exploitEPSS 0%
- Memory safety
mozilla · thunderbirdOct 13, 2026
CVE-2026-110249
34Monitor
Denial-of-service in the Exchange email component
HighCVSS 8.6No exploitEPSS 0%
- Denial of service
mozilla · thunderbirdOct 13, 2026
CVE-2026-110255
33Monitor
Dockhand before 1.0.43 SSRF via /api/templates/compose Endpoint
HighCVSS 8.4No exploitEPSS 0%
- SSRF
finsys · dockhandOct 13, 2026
CVE-2026-49785
31Monitor
UEFI Secure Boot Security Feature Bypass Vulnerability
HighCVSS 7.8No exploitEPSS 0%
microsoft · windows 10 1607Oct 13, 2026
CVE-2026-58280
30Monitor
.NET Denial of Service Vulnerability
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Denial of service
microsoft · .net 10.0Oct 13, 2026
CVE-2026-61931
31Monitor
Windows Perception Simulation Service Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Memory safety
microsoft · windows 10 1809Oct 13, 2026
CVE-2026-68836
31Monitor
Windows kernel32.dll Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Memory safety
microsoft · windows 10 1607Oct 13, 2026
CVE-2026-69326
35Monitor
Graphic Fonts Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
microsoft · windows 10 1607Oct 13, 2026
CVE-2026-69354
31Monitor
Windows Error Reporting Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Memory safety
microsoft · windows 10 1607Oct 13, 2026
CVE-2026-69363
32Monitor
Windows Error Reporting Elevation of Privilege Vulnerability
HighCVSS 8.0No exploitEPSS 0%
- Memory safety
microsoft · windows 10 1607Oct 13, 2026
CVE-2026-69370
35Monitor
Visual Studio Code Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Command injection
microsoft · visual studio codeOct 13, 2026
CVE-2026-69387
28Monitor
Windows Error Reporting Elevation of Privilege Vulnerability
HighCVSS 7.0No exploitEPSS 0%
- Local privilege escalation
- Memory safety
microsoft · windows 10 1607Oct 13, 2026
CVE-2026-69452
28Monitor
Windows Enterprise App Management Elevation of Privilege Vulnerability
HighCVSS 7.1No exploitEPSS 0%
- Memory safety
microsoft · windows 10 1607Oct 13, 2026
CVE-2026-69454
30Monitor
Microsoft Azure Attestation service and Device Health Attestation Service Information Disclosure Vulnerability
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Memory safety
microsoft · windows server 2019Oct 13, 2026
CVE-2026-69471
31Monitor
Windows Installer Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Memory safety
microsoft · windows 10 1607Oct 13, 2026
CVE-2026-69521
35Monitor
Windows iSCSI Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
microsoft · windows 10 1607Oct 13, 2026
CVE-2026-69577
30Monitor
Microsoft Azure Attestation service and Device Health Attestation Service Information Disclosure Vulnerability
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Memory safety
microsoft · windows server 2019Oct 13, 2026
CVE-2026-69596
28Monitor
Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability
HighCVSS 7.0No exploitEPSS 0%
- Local privilege escalation
- Memory safety
microsoft · windows 10 1607Oct 13, 2026
CVE-2026-69633
31Monitor
Windows Update Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Memory safety
microsoft · windows 10 1607Oct 13, 2026
CVE-2026-69634
39Monitor
Windows iSCSI Remote Code Execution Vulnerability
CriticalCVSS 9.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
microsoft · windows 10 1607Oct 13, 2026
CVE-2026-69639
39Monitor
Windows libarchive Remote Code Execution Vulnerability
CriticalCVSS 9.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
microsoft · windows 10 1809Oct 13, 2026
CVE-2026-69650
31Monitor
Windows Key Distribution Center Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Weak crypto
microsoft · windows 10 1607Oct 13, 2026
CVE-2026-69651
30Monitor
.NET Denial of Service Vulnerability
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Denial of service
microsoft · .net 10.0Oct 13, 2026
CVE-2026-69673
31Monitor
Windows Update Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
microsoft · windows 11 23h2Oct 13, 2026
CVE-2026-69705
39Monitor
Windows iSCSI Remote Code Execution Vulnerability
CriticalCVSS 9.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
microsoft · windows 10 1607Oct 13, 2026