Export limit exceeded: 52959 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (52959 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-107651 2 Eog, Redhat 2 Eog, Enterprise Linux 2026-10-14 5.5 Medium
A flaw was found in Eye of GNOME (eog). A heap-based buffer overflow exists in the PNG metadata reader due to improper state handling when parsing split metadata chunks. A remote attacker could exploit this flaw by enticing a user into opening a specially crafted PNG file, potentially leading to arbitrary code execution or a Denial of Service (DoS) via application crash.
CVE-2026-107393 1 Freescout Helpdesk 1 Freescout 2026-10-14 6.1 Medium
FreeScout is a self-hosted help desk and shared mailbox. Prior to 1.8.235, when APP_CLOUDFLARE_IS_USED is enabled, FreeScout trusts an unvalidated CF-Connecting-IP header during failed login attempts and stores the spoofed value in the activity log. LogsMonitor inserts the value into an administrator alert email without HTML escaping, allowing injected HTML to execute when an administrator opens the email. This issue is fixed in version 1.8.235.
CVE-2026-77532 1 Ubiquiti 1 Edgemax Edgeswitch 2026-10-14 8.8 High
A malicious actor with access to an adjacent network could exploit a Buffer Overflow vulnerability found in a DHCPv6-enabled EdgeMAX EdgeSwitch to initiate a Remote Code Execution on such device.
CVE-2026-107301 1 Mcollina 1 Msgpack5 2026-10-14 6.5 Medium
msgpack5 is a msgpack v5 implementation for node.js and the browser. Prior to 6.1.0, constructing msgpack5 with an empty or partial options object disables the default protoAction: 'error' protection. A decoded map containing a __proto__ key can then replace the decoded object's prototype, potentially changing inherited properties or downstream behavior, although Object.prototype is not modified globally. This issue is fixed in version 6.1.0.
CVE-2026-69634 1 Microsoft 15 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 12 more 2026-10-14 9.8 Critical
Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network.
CVE-2026-69721 1 Microsoft 15 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 12 more 2026-10-14 5.5 Medium
Out-of-bounds read in Windows iSCSI allows an authorized attacker to disclose information locally.
CVE-2026-69354 1 Microsoft 14 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 11 more 2026-10-14 7.8 High
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
CVE-2026-69506 1 Microsoft 14 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 11 more 2026-10-14 4.7 Medium
Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally.
CVE-2026-69633 1 Microsoft 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more 2026-10-14 7.8 High
Heap-based buffer overflow in Windows Update allows an authorized attacker to elevate privileges locally.
CVE-2026-69471 1 Microsoft 15 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 12 more 2026-10-14 7.8 High
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-69635 1 Microsoft 15 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 12 more 2026-10-14 6.6 Medium
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges with a physical attack.
CVE-2026-69789 1 Microsoft 14 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 11 more 2026-10-13 7.5 High
Heap-based buffer overflow in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over an adjacent network.
CVE-2026-105726 1 Microsoft 1 Defender For Endpoint 2026-10-13 5.5 Medium
Out-of-bounds read in Microsoft Defender allows an authorized attacker to disclose information locally.
CVE-2026-105733 1 Microsoft 9 Windows 10 21h2, Windows 10 22h2, Windows 11 23h2 and 6 more 2026-10-13 8.8 High
Improper access control in Windows Hyper-V allows an authorized attacker to execute code locally.
CVE-2026-108399 1 Microsoft 15 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 12 more 2026-10-13 7.2 High
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
CVE-2026-109453 1 Microsoft 14 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 11 more 2026-10-13 7 High
Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-88082 1 Microsoft 6 Microsoft Sql Server 2019 For X64-based Systems \(cu32\), Microsoft Sql Server 2022 For X64-based Systems \(cu27\), Microsoft Sql Server 2025 For X64-based Systems \(cu9\) and 3 more 2026-10-13 7 High
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.
CVE-2026-85919 1 Microsoft 6 Microsoft Sql Server 2019 For X64-based Systems \(cu32\), Microsoft Sql Server 2022 For X64-based Systems \(cu27\), Microsoft Sql Server 2025 For X64-based Systems \(cu9\) and 3 more 2026-10-13 7 High
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.
CVE-2026-102192 1 Microsoft 5 Windows Server 2019, Windows Server 2019 (server Core Installation), Windows Server 2022 and 2 more 2026-10-13 7.5 High
Integer underflow (wrap or wraparound) in Windows Failover Cluster allows an unauthorized attacker to deny service over a network.
CVE-2026-102225 1 Microsoft 15 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 12 more 2026-10-13 8.8 High
Out-of-bounds read in Windows Text Shaping allows an unauthorized attacker to execute code over a network.