Export limit exceeded: 389946 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Expected end of text, found ':' (at char 28), (line:1, col:29)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (389946 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-81401 1 Microsoft 13 365, 365 Apps, Excel and 10 more 2026-09-10 5.5 Medium
Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-81388 1 Microsoft 18 365, 365 Apps, Excel and 15 more 2026-09-10 7.8 High
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-20512 1 Mediatek, Inc. 1 Mediatek Chipset 2026-09-10 6.7 Medium
In Audio HAL, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11087540; Issue ID: MSV-8246.
CVE-2026-12650 1 Ivanti 1 Neurons For Itsm 2026-09-10 9.9 Critical
A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server.
CVE-2026-78971 2026-09-10 N/A
In Halo <= 2.25.4, the plugin management feature allows users to install/update malicious plugins, which could let attackers execute any command with Halo process permissions.
CVE-2026-79588 2026-09-10 4.3 Medium
U-speed WIFI4 N300 T1 Pro v1.0.0 is vulnerable to Cleartext transmission of administration credentials over HTTP.
CVE-2026-83527 1 Ivanti 1 Sentry 2026-09-10 8.1 High
An Authentication Bypass vulnerability in Sentry before R10.8.2, R10.7.3 and R10.6.4 allows a remote unauthenticated attacker to gain administrative level access.
CVE-2026-12646 1 Ivanti 1 Neurons For Itsm 2026-09-10 9.9 Critical
A Missing Authorization vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server.
CVE-2026-81391 1 Microsoft 14 365 Apps, Excel, Excel 2016 and 11 more 2026-09-10 5.5 Medium
Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-81393 1 Microsoft 14 365 Apps, Excel, Excel 2016 and 11 more 2026-09-10 5.5 Medium
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-12745 1 Ivanti 1 Neurons For Itsm 2026-09-10 9.8 Critical
A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote unauthenticated attacker to execute arbitrary code on the server.
CVE-2026-12651 1 Ivanti 1 Neurons For Itsm 2026-09-10 8.8 High
A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server.
CVE-2026-12648 1 Ivanti 1 Neurons For Itsm 2026-09-10 8.8 High
A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server.
CVE-2026-12645 1 Ivanti 1 Neurons For Itsm 2026-09-10 9.9 Critical
A Missing Authorization vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server.
CVE-2026-12647 1 Ivanti 1 Neurons For Itsm 2026-09-10 9.9 Critical
A Missing Authorization vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server.
CVE-2026-78512 1 Microsoft 12 365 Apps, Microsoft 365, Microsoft Office Ltsc For Mac 2021 and 9 more 2026-09-10 8.8 High
Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-68787 1 Microsoft 4 Sql Server 2017, Sql Server 2019, Sql Server 2022 and 1 more 2026-09-10 7.8 High
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.
CVE-2026-68878 1 Microsoft 14 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 11 more 2026-09-10 8 High
Stack-based buffer overflow in Windows Fast FAT Driver allows an authorized attacker to elevate privileges over a network.
CVE-2026-69279 1 Microsoft 10 Windows 10 1809, Windows 10 21h2, Windows 10 22h2 and 7 more 2026-09-10 7 High
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-69347 1 Microsoft 14 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 11 more 2026-09-10 7.4 High
Heap-based buffer overflow in Windows Fast FAT Driver allows an unauthorized attacker to execute code locally.