Export limit exceeded: 409320 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 409320 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 409320 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Search Results (409320 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2016-0402 3 Canonical, Oracle, Redhat 7 Ubuntu Linux, Jdk, Jre and 4 more 2026-10-15 N/A
Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66 and Java SE Embedded 8u65 allows remote attackers to affect integrity via unknown vectors related to Networking.
CVE-2016-0141 1 Microsoft 1 Office 2026-10-15 N/A
The Visual Basic macros in Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, and 2016 export a certificate-store private key during a document-save operation, which allows attackers to obtain sensitive information via unspecified vectors, aka "Microsoft Information Disclosure Vulnerability."
CVE-2016-0055 1 Microsoft 1 Office 2026-10-15 N/A
Microsoft Office 2007 SP3 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."
CVE-2016-0035 1 Microsoft 4 Excel, Excel For Mac, Excel Viewer and 1 more 2026-10-15 N/A
Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel for Mac 2011, Excel 2016 for Mac, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."
CVE-2016-0025 1 Microsoft 8 Office, Office Compatibility Pack, Office Online Server and 5 more 2026-10-15 N/A
Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Office 2016, Word 2016, Word for Mac 2011, Word 2016 for Mac, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP2, Word Automation Services on SharePoint Server 2013 SP1, Office Web Apps 2010 SP2, Office Web Apps Server 2013 SP1, and Office Online Server allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."
CVE-2026-70291 1 Microsoft 7 365 Apps, Microsoft 365, Office 2021 and 4 more 2026-10-15 9.8 Critical
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-73596 1 Dell 2 Policy Manager For Secure Connect Gateway, Secure Connect Gateway Policy Manager 2026-10-15 3.8 Low
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Initialization of a Resource with an Insecure Default vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges, Information tampering, Protection mechanism bypass, and Unauthorized access.
CVE-2026-88156 1 Microsoft 7 365 Apps, Microsoft 365, Office 2021 and 4 more 2026-10-15 9.8 Critical
Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-103226 1 Artifex 1 Ghostscript 2026-10-15 6.3 Medium
A vulnerability was identified in Artifex Ghostscript up to 10.07.0. Affected is the function type1_callsubr of the file devices/vector/gdevpsfx.c of the component Pdfwrite. The manipulation leads to stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit is publicly available and might be used. Upgrading to version 10.08.0 is able to address this issue. It is suggested to upgrade the affected component. A solution was implemented: "I've chosen to fix this slightly differently by using the defined macro in the font parsing loop rather than in the callsubr function, because this better matches the pattern of 'normal' usage."
CVE-2026-97016 1 Microsoft 3 365 Apps, Office 2021, Office 2024 2026-10-15 9.8 Critical
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-73597 1 Dell 2 Policy Manager For Secure Connect Gateway, Secure Connect Gateway Policy Manager 2026-10-15 6.5 Medium
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Cross-Site Request Forgery (CSRF) vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure, Information tampering, Launch of phishing attacks, and Protection mechanism bypass.
CVE-2026-105593 1 Microsoft 3 365 Apps, Office 2021, Office 2024 2026-10-15 8.8 High
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
CVE-2026-109938 1 Freerdp 1 Freerdp 2026-10-15 6.5 Medium
Positive mapped-video coordinates overflow and abort FreeRDP clients A malicious or compromised RDP server can terminate a FreeRDP client after the user connects with video redirection enabled.
CVE-2026-32157 1 Microsoft 26 Remote Desktop, Remote Desktop Client, Windows 10 1607 and 23 more 2026-10-15 8.8 High
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
CVE-2026-105595 1 Microsoft 3 365 Apps, Office 2021, Office 2024 2026-10-15 8.8 High
Out-of-bounds read in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
CVE-2026-105596 1 Microsoft 3 365 Apps, Office 2021, Office 2024 2026-10-15 8.8 High
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
CVE-2026-105597 1 Microsoft 3 365 Apps, Office 2021, Office 2024 2026-10-15 8.8 High
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
CVE-2026-102476 2026-10-15 N/A
In Eclipse Vert.x versions [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x HTTP client relies on an SSL context for efficiency purpose, the key of this cache should reflect entirely the SSL semantics of the desired SSL properties. It is possible for a client to ask for an SSL context and obtain an SSL context with weaker properties, for instance a context with hostname validation and obtain a context ignoring hostname validation. The impacted component is io.vertx:vertx-core.
CVE-2026-105598 1 Microsoft 3 365 Apps, Office 2021, Office 2024 2026-10-15 8.8 High
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
CVE-2026-105714 1 Microsoft 3 365 Apps, Office 2021, Office 2024 2026-10-15 7.5 High
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.