Export limit exceeded: 403484 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 30000 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 403484 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (9725 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-69500 1 Microsoft 26 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 23 more 2026-09-23 7 High
Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.
CVE-2026-82720 1 Nlnetlabs 1 Unbound 2026-09-23 5.9 Medium
NLnet Labs Unbound 1.12.0 up to and including 1.26.0 has a use-after-free vulnerability when compiled for DNS-over-HTTPs support with '--with-libnghttp2'. During failure code paths (i.e., RPZ drop query, jostle due to heavy traffic), a dropped DoH stream brings down the whole DoH session and does not account properly for other DoH streams in the same session. This leads to use-after-free in those code paths. If the prerequisites are satisfied (possible RPZ drop or heavy client traffic), a malicious actor can trigger the vulnerability with a single DoH connection and the appropriate traffic. Impact is limited as the reads are not user controlled and the use-after-free leads to early returns. However, a hardened allocator can catch the use-after-free and controllably terminate the process resulting to denial of service.
CVE-2026-0163 1 Google 1 Android 2026-09-23 9.8 Critical
In multiple functions of vpu_ioctl.c, there is a possible use after free due to a use after free. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-93586 1 Imagemagick 1 Imagemagick 2026-09-22 2.9 Low
ImageMagick before 7.1.2-31 and before 6.9.13-56 contains a use-after-free vulnerability in the ImagesToBlob method, caused by a pointer that is not updated correctly. Exploitation may result in a limited availability impact (e.g., a crash of the affected process). The issue is fixed in versions 7.1.2-31 and 6.9.13-56.
CVE-2026-69735 1 Microsoft 18 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 15 more 2026-09-22 7 High
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69740 1 Microsoft 8 Windows 11 23h2, Windows 11 23h2, Windows 11 24h2 and 5 more 2026-09-22 8.8 High
Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.
CVE-2026-69757 1 Microsoft 18 Windows 10 1809, Windows 10 21h2, Windows 10 21h2 and 15 more 2026-09-22 7.1 High
Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges over a network.
CVE-2026-69761 1 Microsoft 26 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 23 more 2026-09-22 7.1 High
Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges over a network.
CVE-2026-94055 1 Exim 1 Exim 2026-09-22 3.7 Low
Exim before 4.100.1, when certain non-default TLS settings are used with GnuTLS, has a use-after-free.
CVE-2026-69775 1 Microsoft 4 Windows 11 23h2, Windows 11 23h2, Windows Server 2025 and 1 more 2026-09-22 7.1 High
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges over a network.
CVE-2026-69782 1 Microsoft 8 Windows 10 1607, Windows 10 1809, Windows Server 2012 and 5 more 2026-09-22 8.1 High
Concurrent execution using shared resource with improper synchronization ('race condition') in DNS Server allows an unauthorized attacker to execute code over a network.
CVE-2026-69784 1 Microsoft 12 Windows 10 21h2, Windows 10 21h2, Windows 10 22h2 and 9 more 2026-09-22 8.8 High
Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.
CVE-2026-69791 1 Microsoft 18 Windows 10 1809, Windows 10 21h2, Windows 10 21h2 and 15 more 2026-09-22 7 High
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
CVE-2026-94084 1 Oisf 1 Suricata 2026-09-22 9.4 Critical
Suricata before 8.0.7 has an Http2ThreadMultiBuf use-after-free when a transaction is inspected by rules that use http.response_header with and without a transform.
CVE-2026-8849 1 Rti 1 Connext Professional 2026-09-22 N/A
Use After Free vulnerability in RTI Connext Professional (Security Plugins) allows File Manipulation. This issue affects Connext Professional: from 7.6.0 before 7.7.0.1.
CVE-2026-69652 1 Microsoft 21 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 18 more 2026-09-22 7 High
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-69654 1 Microsoft 21 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 18 more 2026-09-22 7 High
Use after free in Windows Accounts Control allows an authorized attacker to elevate privileges locally.
CVE-2026-69706 1 Microsoft 26 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 23 more 2026-09-22 7.1 High
Use after free in Windows Win32K allows an authorized attacker to elevate privileges over a network.
CVE-2026-69708 1 Microsoft 18 Windows 10 1809, Windows 10 21h2, Windows 10 21h2 and 15 more 2026-09-22 7 High
Use after free in Windows Web Platform Storage allows an authorized attacker to elevate privileges locally.
CVE-2026-69711 1 Microsoft 21 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 18 more 2026-09-22 7 High
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.