Export limit exceeded: 421397 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (1048 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-69910 | 1 Microsoft | 21 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 18 more | 2026-09-16 | 9.8 Critical |
| Stack-based buffer overflow in Windows Hyper-V allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-68839 | 1 Microsoft | 26 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 23 more | 2026-09-16 | 9.8 Critical |
| Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-83941 | 1 Microsoft | 2 Entra Id, Microsoft Entra Id | 2026-09-16 | 9.9 Critical |
| Missing authorization in Entra ID allows an authorized attacker to elevate privileges over a network. | ||||
| CVE-2026-69463 | 1 Microsoft | 26 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 23 more | 2026-09-14 | 9.8 Critical |
| Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-69525 | 1 Microsoft | 26 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 23 more | 2026-09-14 | 9.8 Critical |
| Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2024-21400 | 1 Microsoft | 1 Confcom | 2026-09-14 | 9 Critical |
| Microsoft Azure Kubernetes Service Confidential Container Elevation of Privilege Vulnerability | ||||
| CVE-2026-78445 | 1 Microsoft | 12 Windows Server 2012, Windows Server 2012 (server Core Installation), Windows Server 2012 R2 and 9 more | 2026-09-11 | 9.8 Critical |
| Use after free in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-81376 | 1 Microsoft | 1 Visual Studio Code | 2026-09-11 | 9.6 Critical |
| Incomplete comparison with missing factors in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network. | ||||
| CVE-2026-77493 | 1 Microsoft | 26 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 23 more | 2026-09-10 | 9.8 Critical |
| Double free in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-69845 | 1 Microsoft | 14 Windows 10 1607, Windows 10 1809, Windows Server 2012 and 11 more | 2026-09-10 | 9.8 Critical |
| Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-65669 | 1 Microsoft | 1 Sql Server Management Studio | 2026-09-09 | 9.6 Critical |
| Improper neutralization of special elements in output used by a downstream component ('injection') in SQL Server allows an unauthorized attacker to elevate privileges over a network. | ||||
| CVE-2026-78509 | 1 Microsoft | 10 365 Apps, Microsoft 365, Office 2019 and 7 more | 2026-09-09 | 9.8 Critical |
| Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-87654 | 2 Google, Microsoft | 2 Chrome, Windows | 2026-09-09 | 9.6 Critical |
| Buffer overflow in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) | ||||
| CVE-2026-87621 | 2 Google, Microsoft | 2 Chrome, Windows | 2026-09-09 | 9.6 Critical |
| Out of bounds write in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) | ||||
| CVE-2026-87528 | 2 Google, Microsoft | 2 Chrome, Windows | 2026-09-09 | 9.6 Critical |
| Type confusion in Rust in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) | ||||
| CVE-2026-87512 | 2 Google, Microsoft | 2 Chrome, Windows | 2026-09-09 | 9.6 Critical |
| Use after free in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) | ||||
| CVE-2026-87494 | 2 Google, Microsoft | 2 Chrome, Windows | 2026-09-09 | 9.6 Critical |
| Use after free in Browser in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) | ||||
| CVE-2026-80098 | 1 Microsoft | 1 Copilot Studio | 2026-09-08 | 9.3 Critical |
| Improper verification of cryptographic signature in Copilot Studio allows an unauthorized attacker to elevate privileges over a network. | ||||
| CVE-2026-62916 | 1 Microsoft | 2 Entra Id, Microsoft Entra Id | 2026-09-08 | 9.1 Critical |
| Authentication bypass using an alternate path or channel in Microsoft Entra ID allows an unauthorized attacker to elevate privileges over a network. | ||||
| CVE-2026-69502 | 1 Microsoft | 1 Azure Sql Database | 2026-09-04 | 10 Critical |
| Server-side request forgery (ssrf) in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network. | ||||