Export limit exceeded: 424797 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 424797 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 424797 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Expected end of text, found 'èmes' (at char 20), (line:1, col:21)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (424797 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-119383 1 Microsoft 23 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 20 more 2026-11-12 6.6 Medium
Use of uninitialized resource in Windows Smart Card allows an authorized attacker to elevate privileges with a physical attack.
CVE-2026-119391 1 Microsoft 13 Windows 11 23h2, Windows 11 23h2, Windows 11 24h2 and 10 more 2026-11-12 7.8 High
Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
CVE-2026-119396 1 Microsoft 23 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 20 more 2026-11-12 6.5 Medium
Improper access control in Windows Remote Access API allows an authorized attacker to perform tampering locally.
CVE-2026-119398 1 Microsoft 23 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 20 more 2026-11-12 7 High
Improper access control in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-119401 1 Microsoft 15 Windows 10 1809, Windows 10 21h2, Windows 10 21h2 and 12 more 2026-11-12 7 High
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
CVE-2026-119382 1 Microsoft 23 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 20 more 2026-11-12 7.8 High
Heap-based buffer overflow in Windows TPM allows an authorized attacker to elevate privileges locally.
CVE-2026-118710 1 Microsoft 11 365 Apps, Microsoft Office Ltsc 2021, Microsoft Office Ltsc 2024 and 8 more 2026-11-12 8.8 High
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-118712 1 Microsoft 11 365 Apps, Microsoft Office Ltsc 2021, Microsoft Office Ltsc 2024 and 8 more 2026-11-12 8.8 High
Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-118721 1 Microsoft 11 365 Apps, Microsoft Office Ltsc 2021, Microsoft Office Ltsc 2024 and 8 more 2026-11-12 8.8 High
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-118725 1 Microsoft 11 365 Apps, Microsoft Office Ltsc 2021, Microsoft Office Ltsc 2024 and 8 more 2026-11-12 8.8 High
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-118726 1 Microsoft 13 365 Apps, Microsoft 365 Apps For Enterprise, Microsoft Office 365 For Mac and 10 more 2026-11-12 8.8 High
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-118730 1 Microsoft 11 365 Apps, Microsoft Office Ltsc 2021, Microsoft Office Ltsc 2024 and 8 more 2026-11-12 8.8 High
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-118478 1 Adobe 3 Adobe Experience Manager, Experience Manager, Experience Manager Cloud Service 2026-11-12 5.4 Medium
Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field. Scope is changed.
CVE-2026-47832 2026-11-12 N/A
The vulnerability lies in the way application credentials are handled within the BOSH deployment. bosh-openstack-cpi-release: all versions from v55 to v55.0.4 (inclusive)
CVE-2026-118146 1 Microsoft 23 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 20 more 2026-11-12 8.8 High
Incorrect authorization in Active Directory Domain Services allows an authorized attacker to execute code over a network.
CVE-2026-118215 1 Microsoft 20 Windows 10 1809, Windows 10 21h2, Windows 10 21h2 and 17 more 2026-11-12 7.8 High
Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.
CVE-2026-118216 1 Microsoft 20 Windows 10 1809, Windows 10 21h2, Windows 10 21h2 and 17 more 2026-11-12 8.8 High
Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.
CVE-2026-118217 1 Microsoft 20 Windows 10 1809, Windows 10 21h2, Windows 10 21h2 and 17 more 2026-11-12 8.8 High
Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.
CVE-2026-118218 1 Microsoft 20 Windows 10 1809, Windows 10 21h2, Windows 10 21h2 and 17 more 2026-11-12 8.8 High
Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.
CVE-2026-40820 2 Helmholz, Mb Connect Line 4 Myrex24v2, Myrex24v2virtual, Mbconnect24 and 1 more 2026-11-12 4.9 Medium
A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getVpnData function due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality.