Export limit exceeded: 407677 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Expected end of text, found ':' (at char 22), (line:1, col:23)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (407677 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-84994 2026-10-13 N/A
Qwik is a performance-focused JavaScript framework. Prior to @builder.io/qwik 1.20.0 and @qwik.dev/core 2.0.0-beta.37, default server-side qwik-json deserialization causes ResourceSerializer.$fill$ to pass resource._resolved to Promise.resolve without first rejecting attacker-controlled thenables. An unauthenticated request can provide a plain object whose then property is a QRL for an unregistered symbol, causing an orphaned asynchronous rejection that terminates Node.js under its default unhandled-rejection policy. A single request can crash a server, and repeated requests can keep replicas unavailable. This issue is fixed in @builder.io/qwik 1.20.0 and @qwik.dev/core 2.0.0-beta.37.
CVE-2026-83728 1 Microsoft 15 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 12 more 2026-10-13 8.8 High
Improper validation of syntactic correctness of input in Windows Hyper-V allows an authorized attacker to perform spoofing locally.
CVE-2026-83665 1 Microsoft 8 Windows 10 1607, Windows 10 1809, Windows Server 2012 and 5 more 2026-10-13 7.5 High
Null pointer dereference in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
CVE-2026-83522 1 Microsoft 15 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 12 more 2026-10-13 8.1 High
Reliance on untrusted inputs in a security decision in Windows IKE Extension allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-59116 1 Microsoft 14 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 11 more 2026-10-13 6.8 Medium
Use of a broken or risky cryptographic algorithm in Windows Remote Desktop allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-96940 1 Microsoft 7 Exchange Server 2016, Exchange Server 2019, Exchange Server Se and 4 more 2026-10-13 8.8 High
Weak authentication in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-88204 1 Microsoft 1 Sharepoint Server 2026-10-13 7.3 High
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-70259 1 Microsoft 1 Sharepoint Server 2026-10-13 6.5 Medium
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
CVE-2026-70194 1 Microsoft 3 .net, Microsoft Visual Studio 2026 Version 18.10, Visual Studio 2022 2026-10-13 6.5 Medium
Improper certificate validation in .NET Framework allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-70181 1 Microsoft 3 Asp.net Core, Microsoft Visual Studio 2026 Version 18.10, Visual Studio 2022 2026-10-13 7.5 High
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.
CVE-2026-70196 1 Microsoft 3 Asp.net Core, Microsoft Visual Studio 2026 Version 18.10, Visual Studio 2022 2026-10-13 5.9 Medium
Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to deny service over a network.
CVE-2026-70159 1 Microsoft 4 Microsoft.aspnetcore.signalr.common, Microsoft.aspnetcore.signalr.core, Microsoft Visual Studio 2026 Version 18.10 and 1 more 2026-10-13 7.5 High
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.
CVE-2026-70186 1 Microsoft 3 Asp.net Core, Microsoft Visual Studio 2026 Version 18.10, Visual Studio 2022 2026-10-13 7.5 High
Deadlock in ASP.NET Core allows an unauthorized attacker to deny service over a network.
CVE-2026-69982 1 Microsoft 7 Windows 10 1607, Windows 10 1809, Windows Server 2012 R2 and 4 more 2026-10-13 5.9 Medium
Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-76281 1 Splunk 2 Splunk, Splunk Enterprise 2026-10-13 5.3 Medium
Improper Access Control. Splunk addressed multiple internally identified vulnerabilities in Splunk Enterprise versions 10.4.3, 10.2.7, 10.0.10, and 9.4.15. The vulnerabilities are grouped by Common Weakness Enumeration (CWE), with one Common Vulnerabilities and Exposures (CVE) identifier assigned to each group. See Details for more information.
CVE-2026-87714 1 Microsoft 15 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 12 more 2026-10-13 6.5 Medium
Missing authorization in WebDAV allows an authorized attacker to bypass a security feature over a network.
CVE-2026-85939 1 Microsoft 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more 2026-10-13 5.3 Medium
Weak authentication in Windows Kernel allows an authorized attacker to bypass a security feature over a network.
CVE-2026-70185 1 Microsoft 15 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 12 more 2026-10-13 8.8 High
Protection mechanism failure in Windows PowerShell allows an authorized attacker to bypass a security feature locally.
CVE-2026-85865 1 Microsoft 8 Windows 10 1607, Windows 10 1809, Windows Server 2012 and 5 more 2026-10-13 5.5 Medium
Improper authentication in Windows DHCP Server allows an authorized attacker to bypass a security feature locally.
CVE-2026-85818 1 Microsoft 7 Windows 11 23h2, Windows 11 24h2, Windows 11 25h2 and 4 more 2026-10-13 9 Critical
Improper verification of cryptographic signature in Windows Schannel allows an unauthorized attacker to perform spoofing over a network.