Export limit exceeded: 414071 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (5709 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-69802 1 Microsoft 12 Windows Server 2012, Windows Server 2012 (server Core Installation), Windows Server 2012 R2 and 9 more 2026-10-14 8.1 High
Weak authentication in Network Device Enrollment Service (NDES) allows an unauthorized attacker to execute code over a network.
CVE-2026-69675 1 Microsoft 12 Windows Server 2012, Windows Server 2012 (server Core Installation), Windows Server 2012 R2 and 9 more 2026-10-14 5.5 Medium
Out-of-bounds read in Windows Network File System allows an authorized attacker to disclose information locally.
CVE-2026-103553 1 Microsoft 15 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 12 more 2026-10-14 7.8 High
Out-of-bounds read in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-83914 1 Microsoft 15 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 12 more 2026-10-13 8.1 High
Use after free in Microsoft XML allows an unauthorized attacker to execute code over a network.
CVE-2026-83704 1 Microsoft 15 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 12 more 2026-10-13 7.8 High
Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
CVE-2017-8529 1 Microsoft 9 Edge, Internet Explorer, Windows 10 and 6 more 2026-10-08 6.5 Medium
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, and Windows Server 2012 and R2 allow an attacker to detect specific files on the user's computer when affected Microsoft scripting engines do not properly handle objects in memory, aka "Microsoft Browser Information Disclosure Vulnerability".
CVE-2026-78446 1 Microsoft 26 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 23 more 2026-10-07 7.5 High
Use after free in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network.
CVE-2021-26411 1 Microsoft 17 Edge, Internet Explorer, Windows 10 1507 and 14 more 2026-10-01 8.8 High
Internet Explorer Memory Corruption Vulnerability
CVE-2026-69576 1 Microsoft 26 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 23 more 2026-10-01 7.8 High
Use after free in Graphic Fonts allows an authorized attacker to elevate privileges locally.
CVE-2026-69546 1 Microsoft 26 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 23 more 2026-10-01 8.1 High
Use after free in Active Directory Domain Services allows an unauthorized attacker to execute code over a network.
CVE-2026-69541 1 Microsoft 26 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 23 more 2026-10-01 7.8 High
Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-69524 1 Microsoft 26 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 23 more 2026-10-01 8.1 High
Use after free in Active Directory Domain Services allows an unauthorized attacker to execute code over a network.
CVE-2026-69275 1 Microsoft 26 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 23 more 2026-09-30 7 High
Use after free in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-69276 1 Microsoft 20 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 17 more 2026-09-30 9.8 Critical
Integer underflow (wrap or wraparound) in Microsoft UxTheme Library (uxtheme.dll) allows an unauthorized attacker to execute code over a network.
CVE-2026-69277 1 Microsoft 26 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 23 more 2026-09-30 7.8 High
Stack-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally.
CVE-2026-69292 1 Microsoft 14 Windows 10 1607, Windows 10 1809, Windows Server 2012 and 11 more 2026-09-30 7 High
Double free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69272 1 Microsoft 26 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 23 more 2026-09-30 7.1 High
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network.
CVE-2026-69271 1 Microsoft 20 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 17 more 2026-09-30 8 High
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network.
CVE-2026-69269 1 Microsoft 26 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 23 more 2026-09-30 7.8 High
Integer underflow (wrap or wraparound) in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally.
CVE-2026-68897 1 Microsoft 20 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 17 more 2026-09-30 7 High
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally.