Export limit exceeded: 409264 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 409264 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 409264 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Expected end of text, found '/' (at char 31), (line:1, col:32)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (409264 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-110146 1 Google 1 Chrome 2026-10-14 6.5 Medium
Information leak in Passwords in Google Chrome prior to 155.0.8059.79 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: High)
CVE-2026-105013 1 Microsoft 1 Sharepoint Server 2026-10-14 7.4 High
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-70162 1 Microsoft 3 Microsoft Visual Studio 2026 Version 18.10, System.security.cryptography.pkcs, Visual Studio 2022 2026-10-14 5.9 Medium
A denial of service vulnerability exists when Microsoft Common Object Runtime Library improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET web application. A remote unauthenticated attacker could exploit this vulnerability by issuing specially crafted requests to the .NET application. The update addresses the vulnerability by correcting how the .NET web application handles web requests.
CVE-2026-105009 1 Microsoft 12 Windows Server 2012, Windows Server 2012 (server Core Installation), Windows Server 2012 R2 and 9 more 2026-10-14 7.5 High
Incorrect default permissions in Windows Server Update Service allows an authorized attacker to elevate privileges locally.
CVE-2026-103558 1 Microsoft 15 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 12 more 2026-10-14 7.5 High
Deadlock in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network.
CVE-2026-110145 1 Google 1 Chrome 2026-10-14 8.3 High
Use after free in Passwords in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-110142 1 Google 1 Chrome 2026-10-14 9.6 Critical
Use after free in FileSystem in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-70279 1 Microsoft 3 Exchange Server 2016, Exchange Server 2019, Exchange Server Se 2026-10-14 9.3 Critical
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-102870 1 Microsoft 3 Microsoft.aspnetcore.components.webassembly.server, Microsoft Visual Studio 2026 Version 18.10, Visual Studio 2022 2026-10-14 8.8 High
Improper control of generation of code ('code injection') in ASP.NET Core allows an unauthorized attacker to execute code over a network.
CVE-2026-58280 1 Microsoft 4 .net, .net Framework, Microsoft Visual Studio 2026 Version 18.10 and 1 more 2026-10-14 7.5 High
Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network.
CVE-2026-102851 1 Microsoft 1 Visual Studio Code 2026-10-14 6.1 Medium
Incorrect privilege assignment in Visual Studio Code allows an authorized attacker to bypass a security feature locally.
CVE-2026-110144 2 Google, Microsoft 2 Chrome, Windows 2026-10-14 9.6 Critical
Incorrect authorization in Mojo in Google Chrome on on Windows prior to 155.0.8059.79 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program. (Chromium security severity: High)
CVE-2026-84008 1 Microsoft 5 .net, .net Framework, Microsoft Visual Studio 2026 Version 18.10 and 2 more 2026-10-14 7.5 High
Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.
CVE-2026-110143 1 Google 1 Chrome 2026-10-14 4.3 Medium
Use of uninitialized variable in ThirdParty lmza_sdk in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to potentially read memory inside the sandbox via a crafted file. (Chromium security severity: High)
CVE-2026-88085 1 Microsoft 8 Microsoft Sql Server 2017 For X64-based Systems \(cu31\), Microsoft Sql Server 2019 For X64-based Systems \(cu32\), Microsoft Sql Server 2022 For X64-based Systems \(cu27\) and 5 more 2026-10-14 6.4 Medium
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.
CVE-2026-88081 1 Microsoft 8 Microsoft Sql Server 2017 For X64-based Systems \(cu31\), Microsoft Sql Server 2019 For X64-based Systems \(cu32\), Microsoft Sql Server 2022 For X64-based Systems \(cu27\) and 5 more 2026-10-14 7.7 High
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-88083 1 Microsoft 4 Microsoft Sql Server 2022 For X64-based Systems \(cu27\), Microsoft Sql Server 2025 For X64-based Systems \(cu9\), Sql Server 2022 and 1 more 2026-10-14 7.5 High
Stack-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.
CVE-2026-110141 1 Google 1 Chrome 2026-10-14 3.1 Low
Observable discrepancy in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
CVE-2026-110140 1 Google 1 Chrome 2026-10-14 8.8 High
Type confusion in V8 in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-110139 1 Google 1 Chrome 2026-10-14 8.8 High
Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)