Export limit exceeded: 12039 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (12039 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-79727 1 Dell 1 Secure Connect Gateway 2026-09-09 3.3 Low
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Exposure of Sensitive System Information Due to Uncleared Debug Information vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to information exposure.
CVE-2026-87650 1 Google 1 Chrome 2026-09-09 9.6 Critical
Out of bounds read in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-87604 1 Google 1 Chrome 2026-09-09 8.3 High
Out of bounds read in ANGLE in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-80076 1 Microsoft 8 365 Apps, Microsoft 365, Office 2019 and 5 more 2026-09-09 6.5 Medium
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.
CVE-2026-78513 1 Microsoft 10 365 Apps, Microsoft 365, Office 2019 and 7 more 2026-09-09 5.5 Medium
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.
CVE-2026-72977 1 Microsoft 10 365 Apps, Microsoft 365, Office 2019 and 7 more 2026-09-09 6.5 Medium
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
CVE-2026-87440 1 Google 1 Chrome 2026-09-09 8.8 High
Out of bounds read in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-86227 1 Valkey-io 1 Valkey 2026-09-09 3.1 Low
A weakness has been identified in valkey-io valkey up to 9.0.5/9.1.1. This affects the function kvstoreGetHashtable of the file src/kvstore.c. This manipulation of the argument didx causes out-of-bounds read. It is possible to initiate the attack remotely. The attack is considered to have high complexity. It is indicated that the exploitability is difficult. The exploit has been made available to the public and could be used for attacks. Patch name: 4691888e7fab3df128f0bde5750c9fde2ae552fa. To fix this issue, it is recommended to deploy a patch. Exploitation requires cluster mode plus attacker-controlled dump.rdb at startup (data-dir write access, replication feed, or a stored crafted RDB) - an attacker-position DoS at boot, not network pre-auth. The issue report was closed stating it "is worth fixing for the sake of memory safety… but I don't think it meets our bar for a security disclosure."
CVE-2026-24225 1 Nvidia 2 Dgx Spark, Dgx Spark Uefi 2026-09-09 6 Medium
NVIDIA DGX Spark contains a vulnerability in the standalone MM firmware where an attacker could be able to cause an out-of-bounds read. A successful exploit of this vulnerability might lead to information disclosure.
CVE-2026-81390 1 Microsoft 12 365 Apps, Excel, Excel 2016 and 9 more 2026-09-09 5.5 Medium
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-78515 1 Microsoft 9 365 Apps, Microsoft 365, Office 2016 and 6 more 2026-09-09 6.5 Medium
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-67624 1 Microsoft 6 Microsoft Sql Server 2019 (gdr), Microsoft Sql Server 2022 (gdr), Microsoft Sql Server 2025 For X64-based Systems (gdr) and 3 more 2026-09-08 6.5 Medium
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-67389 1 Microsoft 2 Sql Server 2022, Sql Server 2025 2026-09-08 6.5 Medium
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-78522 1 Microsoft 6 365 Apps, Office 2019, Office 2021 and 3 more 2026-09-08 6.5 Medium
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-80079 1 Microsoft 6 365 Apps, Office 2019, Office 2021 and 3 more 2026-09-08 6.5 Medium
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-80090 1 Microsoft 10 365 Apps, Microsoft 365, Office 2019 and 7 more 2026-09-08 6.5 Medium
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-78502 1 Microsoft 10 365 Apps, Microsoft 365, Office 2019 and 7 more 2026-09-08 6.5 Medium
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-72976 1 Microsoft 10 365 Apps, Microsoft 365, Office 2019 and 7 more 2026-09-08 5 Medium
Out-of-bounds read in Microsoft Office Word allows an authorized attacker to disclose information locally.
CVE-2026-67369 1 Microsoft 3 Microsoft Sql Server 2025 (cu8), Microsoft Sql Server 2025 For X64-based Systems (gdr), Sql Server 2025 2026-09-08 6.5 Medium
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-0799 1 Tcpdump 1 Libpcap 2026-09-08 8.7 High
In BPF instructions that load/store a value from/to a scratch memory register the register index is an unsigned 32-bit integer and must not exceed 15, but libpcap BPF interpreter does not validate the value. In particular uncommon use cases a crafted filter program can cause the interpreter to try reading and writing the OS process memory in the 16GiB starting at the current stack frame on 64-bit architectures and in the entire address space on 32-bit architectures.