Export limit exceeded: 416316 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Expected end of text, found ':' (at char 6), (line:1, col:7)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (416316 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-83667 1 Microsoft 28 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 25 more 2026-10-18 6.5 Medium
Out-of-bounds read in Active Directory Domain Services allows an authorized attacker to deny service over a network.
CVE-2026-83671 1 Microsoft 20 Windows 10 1809, Windows 10 21h2, Windows 10 21h2 and 17 more 2026-10-18 6.5 Medium
Out-of-bounds read in Windows Hyper-V allows an authorized attacker to disclose information locally.
CVE-2026-83675 1 Microsoft 10 Windows 11 24h2, Windows 11 24h2, Windows 11 25h2 and 7 more 2026-10-18 7 High
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-83674 1 Microsoft 9 Windows 10 1607, Windows 10 1809, Windows Server 2016 and 6 more 2026-10-18 8.1 High
Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-83519 1 Microsoft 28 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 25 more 2026-10-18 9.8 Critical
Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.
CVE-2026-83665 1 Microsoft 14 Windows 10 1607, Windows 10 1809, Windows Server 2012 and 11 more 2026-10-18 7.5 High
Null pointer dereference in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
CVE-2026-83670 1 Microsoft 28 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 25 more 2026-10-18 7.5 High
Out-of-bounds read in Function Discovery Service (fdwsd.dll) allows an unauthorized attacker to disclose information over a network.
CVE-2026-83676 1 Microsoft 17 Windows 10 21h2, Windows 10 21h2, Windows 10 22h2 and 14 more 2026-10-18 7 High
Integer underflow (wrap or wraparound) in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-83523 1 Microsoft 10 Windows 11 24h2, Windows 11 24h2, Windows 11 25h2 and 7 more 2026-10-18 8.8 High
Heap-based buffer overflow in Windows Image Acquisition allows an unauthorized attacker to execute code over a network.
CVE-2026-96658 2 Redhat, Theforeman 5 Enterprise Linux, Satellite, Satellite Capsule and 2 more 2026-10-18 8.8 High
A flaw was found in Foreman. This vulnerability allows an authenticated remote attacker with low-level read permissions to achieve arbitrary code execution on the underlying server. By manipulating the permitted methods list within the template rendering engine, an attacker can bypass the safemode sandbox isolation and execute unauthorized commands directly on the host system.
CVE-2026-70041 1 Microsoft 28 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 25 more 2026-10-18 5.5 Medium
Buffer over-read in Windows CD-ROM Driver allows an authorized attacker to disclose information locally.
CVE-2026-83564 1 Microsoft 28 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 25 more 2026-10-18 7 High
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
CVE-2026-78851 1 Getgrav 1 Grav Cms 2026-10-18 6.5 Medium
Directory Traversal vulnerability in Grav CMS 2.0.3 through 2.0.6 allows a remote attacker to obtain sensitive information via the GravExtension.php and the mediaDirFunc method.
CVE-2026-74920 1 Wordpress-extensions 1 Document Gallery 2026-10-18 7.1 High
The Document Gallery WordPress plugin through 5.1.1 does not properly sanitise and escape user input before reflecting it inside an HTML attribute in the response of an unauthenticated AJAX action, leading to a Reflected Cross-Site Scripting vulnerability which can be exploited against any visitor, including a logged-in administrator.
CVE-2026-83583 1 Microsoft 23 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 20 more 2026-10-18 7.8 High
Improper access control in Windows Geotag Broker allows an authorized attacker to elevate privileges locally.
CVE-2026-74923 1 Wordpress-extensions 1 Document Gallery 2026-10-18 5.3 Medium
The Document Gallery WordPress plugin through 5.1.1 does not perform any capability or ownership check when generating a gallery on demand, allowing unauthenticated users to enumerate and disclose the titles, descriptions and direct file URLs of media attached to unpublished, private or trashed content.
CVE-2026-111877 1 Dext34-morgan 1 Books4cash 2026-10-18 4.3 Medium
A vulnerability was determined in dext34-morgan Books4Cash up to a8d3e357db75c07ac5ffbadcbaee2aeb4db3e571. This affects an unknown part of the file search.php. Executing a manipulation of the argument Search can lead to cross site scripting. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. The code repository of the project has not been active for many years.
CVE-2026-88169 1 Microsoft 11 365 Apps, Microsoft 365, Microsoft Office Ltsc 2021 and 8 more 2026-10-18 6.5 Medium
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-82844 1 Wordpress-extensions 1 Wpforms Lite 2026-10-18 5.3 Medium
The WPForms Lite WordPress plugin before 2.0.2.2 does not verify server-side that a payment was completed before accepting a submission on forms using its PayPal Commerce gateway, allowing unauthenticated visitors to submit paid forms without paying. The form's confirmation is delivered and its notification emails are sent even though no order exists at the payment provider and no payment is recorded.
CVE-2026-77816 1 Ibm 2 Websphere Application Server Liberty, Websphere Application Server Liberty 2026-10-18 6.5 Medium
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 administrative client could allow man-in-the-middle attacks. An attacker could exploit this vulnerability to obtain sensitive information.