Export limit exceeded: 421429 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 421429 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 109281 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (109281 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-55031 1 Microsoft 17 365 Apps, Excel, Excel 2016 and 14 more 2026-08-07 7.8 High
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-55029 1 Microsoft 17 365 Apps, Excel, Excel 2016 and 14 more 2026-08-07 7.8 High
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-55141 1 Microsoft 17 365 Apps, Excel, Excel 2016 and 14 more 2026-08-07 7.8 High
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-55055 1 Microsoft 21 365 Apps, Microsoft 365, Microsoft 365 Apps For Enterprise and 18 more 2026-08-07 7.8 High
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-55132 1 Microsoft 21 365 Apps, Microsoft 365, Microsoft 365 Apps For Enterprise and 18 more 2026-08-07 7.8 High
Double free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-55043 1 Microsoft 16 365 Apps, Microsoft 365, Microsoft 365 Apps For Enterprise and 13 more 2026-08-07 7.8 High
Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.
CVE-2026-55949 1 Microsoft 18 365 Apps, Excel, Excel 2016 and 15 more 2026-08-07 7.8 High
Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-54124 1 Microsoft 16 Terminal, Windows 10 21h2, Windows 10 21h2 and 13 more 2026-08-07 7.8 High
Integer overflow or wraparound in Windows Terminal allows an unauthorized attacker to execute code locally.
CVE-2026-47300 4 Apple, Linux, Microsoft and 1 more 9 Macos, Linux Kernel, .net and 6 more 2026-08-07 8.8 High
Incorrect implementation of authentication algorithm in ASP.NET Core allows an authorized attacker to elevate privileges over a network.
CVE-2026-47302 4 Apple, Linux, Microsoft and 1 more 22 Macos, Linux Kernel, .net and 19 more 2026-08-07 7.5 High
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.
CVE-2026-47303 4 Apple, Linux, Microsoft and 1 more 9 Macos, Linux Kernel, .net and 6 more 2026-08-07 8.8 High
Authentication bypass by assumed-immutable data in ASP.NET Core allows an authorized attacker to elevate privileges over a network.
CVE-2026-67977 1 Nasa 1 Fprime 2026-08-07 7.5 High
An integer overflow in the Svc::FileDownlink::SendPartial component of fprime framework v4.2.2 allows attackers to cause a Denial of Service (DoS) via a crafted input.
CVE-2025-15672 2 Chamawp, Wordpress 2 Chamawp, Wordpress 2026-08-07 8.1 High
The ChamaWP WordPress plugin before 1.0.13 does not properly validate user input before passing it to a PHP deserialization function, allowing unauthenticated attackers to inject arbitrary PHP objects, which could lead to remote code execution when a suitable gadget chain is present via other installed code.
CVE-2025-70962 1 Zositech 1 Zosi C519m 2026-08-07 7.5 High
Zosi C519M V4.2.8.823C01450BA is vulnerable to Incorrect Access Control. The application contains hardcoded credentials in the RTSP authentication mechanism. An attacker with network access can use the unchangeable default credentials to access the RTSP video stream, resulting in unauthorized viewing of camera footage.
CVE-2026-67552 1 Apache 2 Qpid Proton-dotnet, Qpid Proton Dotnet 2026-08-07 7.5 High
A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of service. This issue affects Apache Qpid Proton-Dotnet through 1.0.0. Users are recommended to upgrade to version 1.1.0, which fixes the issue
CVE-2026-15230 2 Wordpress, Yaycommerce 2 Wordpress, Yaypricing 2026-08-07 8.1 High
The YayPricing WordPress plugin before 3.5.7 does not perform capability checks on several of its REST API routes, relying only on a shared nonce, allowing any authenticated user such as a subscriber to overwrite the store's pricing configuration and to disclose private coupon codes.
CVE-2026-71559 1 Apache 1 Fory 2026-08-07 7.5 High
Deserialization of Untrusted Data vulnerability in the Go implementation of Apache Fory allows an attacker to cause a denial of service by supplying crafted data containing malformed type metadata, which triggers an uncaught panic. This issue affects Apache Fory: from 0.16.0 before 1.5.0.  Users of other language implementations are not affected. Users are recommended to upgrade to version 1.5.0, which fixes the issue.
CVE-2026-55034 1 Microsoft 4 Sharepoint Server, Sharepoint Server 2016, Sharepoint Server 2019 and 1 more 2026-08-07 7.3 High
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-55045 1 Microsoft 20 365 Apps, Microsoft 365, Microsoft 365 Apps For Enterprise and 17 more 2026-08-07 8.4 High
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-55127 1 Microsoft 15 365 Apps, Microsoft 365, Office 2019 and 12 more 2026-08-07 7.8 High
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.