Search

Expected end of text, found '–' (at char 31), (line:1, col:32)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (425877 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-58799 1 Google 1 Android 2026-11-14 9.8 Critical
In multiple functions of rmmi_utility.c, there is a possible way to trigger an out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58800 1 Google 1 Android 2026-11-14 9.8 Critical
In IMG_vkCreateImageView of image_view.c, there is a possible way to trigger a use after free due to memory corruption. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58801 1 Google 1 Android 2026-11-14 2.3 Low
In smmu_domain_config_s1 of arm-smmu-v3.c, there is a possible way to access stale stream table entries across reassigned stream identifiers due to a logic error. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58805 1 Google 1 Android 2026-11-14 6.7 Medium
In multiple locations, there is a possible way to zero arbitrary secure memory via unvalidated image body addresses due to a missing bounds check. This could lead to physical escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58812 1 Google 1 Android 2026-11-14 3.3 Low
In decode of fw_vp9_dec_pic.c, there is a possible Logic error due to a logic error in the code. This could lead to local information disclosure with execution privileges needed. User interaction is for exploitation.
CVE-2026-59575 1 Google 1 Android 2026-11-14 6.2 Medium
In stpropnci_cb_observe_mode_suspend of stpropnci_prop_android.cc, there is a possible way to trigger an out of bounds write into global state due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-59579 1 Google 1 Android 2026-11-14 4.0 Medium
In getUserDataPayload of GC2UserData.cpp, there is a possible Logic error due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.
CVE-2026-124942 1 Mozilla 2 Firefox, Thunderbird 2026-11-14 3.4 Low
Invalid pointer in the DOM: Streams component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.
CVE-2026-124948 1 Mozilla 2 Firefox, Thunderbird 2026-11-14 8.8 High
Incorrect boundary conditions, use-after-free in the Graphics component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.
CVE-2026-124951 1 Mozilla 2 Firefox, Thunderbird 2026-11-14 8.8 High
Privilege escalation in the Nimbus Desktop Client component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.
CVE-2026-124852 1 Mozilla 2 Firefox, Thunderbird 2026-11-14 8.8 High
Incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 160 and Thunderbird 160.
CVE-2026-124867 1 Mozilla 2 Firefox, Thunderbird 2026-11-14 8.8 High
Use-after-free in the DOM: Editor component. This vulnerability was fixed in Firefox 160 and Thunderbird 160.
CVE-2026-124871 1 Mozilla 2 Firefox, Thunderbird 2026-11-14 8.8 High
Use-after-free in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 160 and Thunderbird 160.
CVE-2026-124878 1 Mozilla 2 Firefox, Thunderbird 2026-11-14 8.8 High
Use-after-free in the Layout: Positioned component. This vulnerability was fixed in Firefox 160 and Thunderbird 160.
CVE-2026-124900 1 Mozilla 2 Firefox, Thunderbird 2026-11-14 9.6 Critical
Sandbox escape due to use-after-free in the DOM: Service Workers component. This vulnerability was fixed in Firefox 160 and Thunderbird 160.
CVE-2026-124904 1 Mozilla 2 Firefox, Thunderbird 2026-11-14 8.8 High
Use-after-free in the SVG component. This vulnerability was fixed in Firefox 160 and Thunderbird 160.
CVE-2026-124908 1 Mozilla 2 Firefox, Thunderbird 2026-11-14 8.8 High
Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 160 and Thunderbird 160.
CVE-2026-124911 1 Mozilla 1 Firefox 2026-11-14 6.1 Medium
Clickjacking issue in the Autofill component in Firefox for Android. This vulnerability was fixed in Firefox 160.
CVE-2026-124920 1 Mozilla 2 Firefox, Thunderbird 2026-11-14 6.1 Medium
Uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 160 and Thunderbird 160.
CVE-2026-124921 1 Mozilla 2 Firefox, Thunderbird 2026-11-14 6.1 Medium
Sandbox escape in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 160 and Thunderbird 160.