Search

Expected end of text, found '/' (at char 30), (line:1, col:31)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (389616 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-81376 1 Microsoft 1 Visual Studio Code 2026-09-09 9.6 Critical
Incomplete comparison with missing factors in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-81349 1 Microsoft 1 Azure Hdinsights 2026-09-09 7.2 High
Improper neutralization of special elements used in an os command ('os command injection') in Azure HDInsights allows an authorized attacker to elevate privileges over a network.
CVE-2026-80097 1 Microsoft 1 Authenticator 2026-09-09 8.6 High
Improper authentication in Microsoft Authenticator allows an unauthorized attacker to elevate privileges locally.
CVE-2026-80093 1 Microsoft 10 Windows 10 1809, Windows 10 21h2, Windows 10 22h2 and 7 more 2026-09-09 7 High
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-80075 1 Microsoft 5 Windows 10 21h2, Windows 10 22h2, Windows 11 24h2 and 2 more 2026-09-09 7.8 High
Heap-based buffer overflow in Windows Work Folders allows an authorized attacker to elevate privileges locally.
CVE-2026-80077 1 Microsoft 1 Remote Desktop 2026-09-09 8.8 High
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
CVE-2026-80074 1 Microsoft 1 Remote Desktop 2026-09-09 8.8 High
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
CVE-2026-65669 1 Microsoft 1 Sql Server Management Studio 2026-09-09 9.6 Critical
Improper neutralization of special elements in output used by a downstream component ('injection') in SQL Server allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-68786 1 Microsoft 4 Sql Server 2017, Sql Server 2019, Sql Server 2022 and 1 more 2026-09-09 8.8 High
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-78518 1 Microsoft 11 365 Apps, Excel, Excel 2016 and 8 more 2026-09-09 8.8 High
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-78509 1 Microsoft 10 365 Apps, Microsoft 365, Office 2019 and 7 more 2026-09-09 9.8 Critical
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-78504 1 Microsoft 10 365 Apps, Microsoft 365, Office 2019 and 7 more 2026-09-09 8.8 High
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-78510 1 Microsoft 9 365 Apps, Microsoft 365, Office 2016 and 6 more 2026-09-09 9.8 Critical
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-78505 1 Microsoft 9 365 Apps, Microsoft 365, Office 2016 and 6 more 2026-09-09 8.8 High
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
CVE-2026-78511 1 Microsoft 10 365 Apps, Microsoft 365, Office 2019 and 7 more 2026-09-09 8.8 High
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-67384 1 Microsoft 12 Microsoft Sql Server 2017 (cu 31), Microsoft Sql Server 2017 (gdr), Microsoft Sql Server 2019 (cu 32) and 9 more 2026-09-09 8.8 High
Integer overflow or wraparound in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-78463 1 Microsoft 1 Remote Desktop 2026-09-09 8.8 High
Improper control of generation of code ('code injection') in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
CVE-2026-67378 1 Microsoft 6 Microsoft Sql Server 2019 (gdr), Microsoft Sql Server 2022 (gdr), Microsoft Sql Server 2025 For X64-based Systems (gdr) and 3 more 2026-09-09 8.5 High
Untrusted pointer dereference in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-78439 1 Microsoft 4 Office, Office 365, Office Macos 2021 and 1 more 2026-09-09 8.8 High
Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
CVE-2026-69273 1 Microsoft 1 Sharepoint Server 2026-09-09 8.8 High
Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.