Export limit exceeded: 412676 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (412676 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-97016 | 1 Microsoft | 3 365 Apps, Office 2021, Office 2024 | 2026-10-15 | 9.8 Critical |
| Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-73597 | 1 Dell | 2 Policy Manager For Secure Connect Gateway, Secure Connect Gateway Policy Manager | 2026-10-15 | 6.5 Medium |
| Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Cross-Site Request Forgery (CSRF) vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure, Information tampering, Launch of phishing attacks, and Protection mechanism bypass. | ||||
| CVE-2026-105593 | 1 Microsoft | 3 365 Apps, Office 2021, Office 2024 | 2026-10-15 | 8.8 High |
| Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-109938 | 1 Freerdp | 1 Freerdp | 2026-10-15 | 6.5 Medium |
| Positive mapped-video coordinates overflow and abort FreeRDP clients A malicious or compromised RDP server can terminate a FreeRDP client after the user connects with video redirection enabled. | ||||
| CVE-2026-32157 | 1 Microsoft | 26 Remote Desktop, Remote Desktop Client, Windows 10 1607 and 23 more | 2026-10-15 | 8.8 High |
| Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-105595 | 1 Microsoft | 3 365 Apps, Office 2021, Office 2024 | 2026-10-15 | 8.8 High |
| Out-of-bounds read in Microsoft Office Access allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-105596 | 1 Microsoft | 3 365 Apps, Office 2021, Office 2024 | 2026-10-15 | 8.8 High |
| Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-105597 | 1 Microsoft | 3 365 Apps, Office 2021, Office 2024 | 2026-10-15 | 8.8 High |
| Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-105598 | 1 Microsoft | 3 365 Apps, Office 2021, Office 2024 | 2026-10-15 | 8.8 High |
| Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-105714 | 1 Microsoft | 3 365 Apps, Office 2021, Office 2024 | 2026-10-15 | 7.5 High |
| Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-105716 | 1 Microsoft | 3 365 Apps, Office 2021, Office 2024 | 2026-10-15 | 8.8 High |
| Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-105717 | 1 Microsoft | 6 365 Apps, Microsoft 365 Apps For Enterprise, Microsoft Office Ltsc 2021 and 3 more | 2026-10-15 | 8.8 High |
| Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-94506 | 1 Microsoft | 3 365 Apps, Office 2021, Office 2024 | 2026-10-15 | 6.5 Medium |
| Out-of-bounds read in Microsoft Office Access allows an unauthorized attacker to disclose information over a network. | ||||
| CVE-2026-96614 | 2026-10-15 | N/A | ||
| "ゲオアプリ" provided by GEO CORPORATION is vulnerable to improper authorization in handler for a custom URL scheme. An attacker may be able to cause the application's in-app browser to access an arbitrary website, potentially leading to phishing attacks or disclosure of a service's session ID. | ||||
| CVE-2026-86856 | 1 Redhat | 3 Enterprise Linux, Openshift, Openstack | 2026-10-15 | 6.5 Medium |
| A flaw was found in the DPDK nfp vDPA driver. Stack and heap buffers sized for a single queue pair can be overflowed when more virtqueues are configured, leading to a host crash or memory corruption. | ||||
| CVE-2026-86845 | 1 Redhat | 3 Enterprise Linux, Openshift, Openstack | 2026-10-15 | 6.5 Medium |
| A flaw was found in DPDK lib/vhost vhost-crypto. Session cleanup can leave a stale cached session pointer, and the data path does not check the session type before attaching it, leading to use-after-free or type confusion in the host vhost-crypto backend. | ||||
| CVE-2026-79824 | 2026-10-15 | 8 High | ||
| A directory traversal vulnerability in HPE NonStop Python 3.x could allow attackers to overwrite arbitrary files via a .. (dot dot) sequence in filenames in a TAR archive. | ||||
| CVE-2026-79822 | 2026-10-15 | 7.1 High | ||
| A security vulnerability in HPE NonStop TNS/X Native Inspect may cause corruption of address and potentially redirect execution flow. | ||||
| CVE-2026-79821 | 2026-10-15 | 8.2 High | ||
| A security vulnerability in HPE NonStop SOAP 4.0 may cause memory corruption resulting in a system down. | ||||
| CVE-2026-76668 | 2026-10-15 | 6.3 Medium | ||
| A security vulnerability in HPE NonStop Kernel may allow user space access to privileged or unmapped data. | ||||