Maple Labs · CVE search
Every CVE, searchable.
The US government’s National Vulnerability Database, kept on Maple Labs’ own hardware and updated every two hours. Search by CVE, product or words, and filter by severity or CISA’s known-exploited list.
423,897 CVEs, updated from the NVD 1 hour ago.
521–540 of 404,740
-
CVE-2026-96137
medium 5.5
Exposure of sensitive system information to an unauthorized control sphere in Windows Graphics Kernel allows an authorized attacker to disclose information locally.
-
CVE-2026-96134
high 7.5
Uncontrolled resource consumption in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
-
CVE-2026-96133
medium 5.5
Improper access control in Windows Graphics Kernel allows an authorized attacker to disclose information locally.
-
CVE-2026-96129
high 7.8
Inclusion of functionality from untrusted control sphere in Windows Kernel allows an authorized attacker to elevate privileges locally.
-
CVE-2026-96127
high 7.8
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
-
CVE-2026-96126
high 7.8
Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
-
CVE-2026-96124
high 7.0
Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
-
CVE-2026-96122
high 7.8
Untrusted pointer dereference in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
-
CVE-2026-96117
high 7.8
Heap-based buffer overflow in Windows LUAFV allows an authorized attacker to elevate privileges locally.
-
CVE-2026-96115
high 8.0
Double free in Windows DHCP Client allows an authorized attacker to elevate privileges over an adjacent network.
-
CVE-2026-96112
medium 5.5
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information locally.
-
CVE-2026-96110
medium 5.5
Use after free in Windows OLE allows an authorized attacker to disclose information locally.
-
CVE-2026-96107
high 7.0
Null pointer dereference in Windows Phone Service allows an authorized attacker to elevate privileges locally.
-
CVE-2026-96103
high 7.8
Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
-
CVE-2026-96102
high 7.8
Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
-
CVE-2026-96101
medium 5.5
Files or directories accessible to external parties in Windows Connected User Experiences and Telemetry allows an authorized attacker to disclose information locally.
-
CVE-2026-96097
high 7.0
Release of invalid pointer or reference in Windows Brokering File System allows an authorized attacker to elevate privileges locally.
-
CVE-2026-96093
medium 4.7
Out-of-bounds read in Windows Internet (wininet.dll) allows an authorized attacker to disclose information locally.
-
CVE-2026-96092
high 8.1
Use after free in DNS Server allows an unauthorized attacker to execute code over a network.
-
CVE-2026-96088
high 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally.