Export limit exceeded: 378611 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 20009 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 378611 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 378611 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Expected end of text, found ':' (at char 27), (line:1, col:28)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (378611 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-65678 1 Microsoft 21 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 18 more 2026-08-17 7 High
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-65785 1 Microsoft 8 Windows 11 24h2, Windows 11 24h2, Windows 11 25h2 and 5 more 2026-08-17 6.5 Medium
Uncontrolled resource consumption in Windows DHCP Client allows an unauthorized attacker to deny service over an adjacent network.
CVE-2026-65784 1 Microsoft 26 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 23 more 2026-08-17 5.5 Medium
Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.
CVE-2026-65786 1 Microsoft 21 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 18 more 2026-08-17 7.8 High
Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
CVE-2026-65789 1 Microsoft 9 Windows 10 1607, Windows 10 1809, Windows Server 2016 and 6 more 2026-08-17 8.1 High
Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.
CVE-2026-65787 1 Microsoft 22 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 19 more 2026-08-17 7.8 High
Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
CVE-2026-65788 1 Microsoft 10 Windows 11 23h2, Windows 11 23h2, Windows 11 24h2 and 7 more 2026-08-17 7 High
Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
CVE-2026-65814 1 Microsoft 26 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 23 more 2026-08-17 7.8 High
Heap-based buffer overflow in Windows Storage Port Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-66799 1 Microsoft 26 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 23 more 2026-08-17 7.8 High
Heap-based buffer overflow in Windows Key Guard allows an authorized attacker to elevate privileges locally.
CVE-2026-68809 1 Microsoft 7 365 Apps, Microsoft 365 Apps For Enterprise, Office 2019 and 4 more 2026-08-17 5.5 Medium
Incomplete cleanup in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.
CVE-2026-70318 1 Microsoft 14 365 Apps, Microsoft 365, Microsoft 365 Apps For Enterprise and 11 more 2026-08-17 5.5 Medium
Improper input validation in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-70317 1 Microsoft 13 365 Apps, Microsoft 365, Microsoft 365 Apps For Enterprise and 10 more 2026-08-17 5.5 Medium
Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-62842 1 Microsoft 13 365 Apps, Microsoft 365, Microsoft Office 365 For Mac and 10 more 2026-08-17 5.5 Medium
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-64897 1 Microsoft 4 Sharepoint Server, Sharepoint Server 2016, Sharepoint Server 2019 and 1 more 2026-08-17 4.6 Medium
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-64910 1 Microsoft 12 365 Apps, Microsoft 365, Microsoft 365 Apps For Enterprise and 9 more 2026-08-17 7.8 High
Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-58612 1 Microsoft 1 Powershell 2026-08-17 7.4 High
Server-side request forgery (ssrf) in Microsoft PowerShell Core allows an unauthorized attacker to disclose information over a network.
CVE-2026-74901 2026-08-17 9.8 Critical
openssl_encrypt versions before 1.4.0 contain an authentication bypass vulnerability in pqc.py where AES-GCM decryption failures trigger fallback to unauthenticated AES-CTR mode. Attackers can modify ciphertext in transit to bypass integrity verification and perform bit-flipping attacks without detection.
CVE-2026-74899 2026-08-17 9.8 Critical
openssl_encrypt versions before 1.4.0 contain a sandbox escape vulnerability in IsolatedPluginExecutor that exposes Python type objects in restricted exec() builtins. Attackers can traverse the Python class hierarchy via __class__.__mro__.__subclasses__() to access system functions and execute arbitrary OS commands.
CVE-2026-74894 2026-08-17 9.8 Critical
openssl_encrypt before 1.4.0 contains an authentication bypass vulnerability in the verify_api_token function that accepts any non-empty Bearer token string without validation. Attackers can upload arbitrary public keys, enumerate all keys, and revoke keys belonging to any user by providing any Bearer token in the Authorization header.
CVE-2026-74892 2026-08-17 7.5 High
openssl_encrypt versions before 1.4.0 contain a hardcoded default secret key in the standalone telemetry server configuration that is used for API key hashing. Attackers who know this default value can predict or forge API key hashes to compromise telemetry API authentication.