Export limit exceeded: 414517 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Expected end of text, found ':' (at char 29), (line:1, col:30)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (414517 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-69954 1 Microsoft 28 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 25 more 2026-10-17 5.5 Medium
Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally.
CVE-2026-69940 1 Microsoft 28 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 25 more 2026-10-17 6.5 Medium
Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information over a network.
CVE-2026-69949 1 Microsoft 28 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 25 more 2026-10-17 7.8 High
Heap-based buffer overflow in Windows Client for NFS allows an authorized attacker to elevate privileges locally.
CVE-2026-69963 1 Microsoft 28 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 25 more 2026-10-17 7.8 High
Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69955 1 Microsoft 28 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 25 more 2026-10-17 6.5 Medium
Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information over a network.
CVE-2026-85903 1 Microsoft 28 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 25 more 2026-10-17 8.8 High
Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.
CVE-2026-107274 2026-10-17 N/A
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-107772 2026-10-17 N/A
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-108117 2026-10-17 N/A
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-107345 2026-10-17 N/A
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-105391 2026-10-17 N/A
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-88153 1 Microsoft 5 365 Apps, Microsoft Office Ltsc 2021, Microsoft Office Ltsc 2024 and 2 more 2026-10-17 6.5 Medium
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-88150 1 Microsoft 13 365 Apps, Microsoft 365, Microsoft 365 Apps For Enterprise and 10 more 2026-10-17 8.8 High
Use of uninitialized resource in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-88185 1 Microsoft 13 365 Apps, Microsoft 365, Microsoft 365 Apps For Enterprise and 10 more 2026-10-17 8.1 High
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-69840 1 Microsoft 23 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 20 more 2026-10-17 7 High
Use after free in Windows Certificates allows an authorized attacker to elevate privileges locally.
CVE-2026-69886 1 Microsoft 28 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 25 more 2026-10-17 9.8 Critical
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
CVE-2026-69856 1 Microsoft 20 Windows 10 1809, Windows 10 21h2, Windows 10 21h2 and 17 more 2026-10-17 7 High
Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.
CVE-2026-83752 1 Microsoft 28 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 25 more 2026-10-17 7 High
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-69884 1 Microsoft 28 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 25 more 2026-10-17 7.8 High
Buffer over-read in Windows GDI allows an authorized attacker to elevate privileges locally.
CVE-2026-63163 1 Omnispace 1 Agora Project 2026-10-17 7.5 High
Omnispace Agora Project before 26.10.0 contains a broken access control vulnerability in the MobileFileDownload route that allows unauthenticated attackers to download arbitrary files by computing an md5(filename) token instead of passing a proper authorization check. Attackers can guess or determine file names to generate the corresponding md5 token and retrieve protected files without authorization, leading to unauthorized information disclosure.