Export limit exceeded: 24486 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 424760 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (424760 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-111306 | 1 Microsoft | 10 365 Apps, Microsoft Office Ltsc 2021, Microsoft Office Ltsc 2024 and 7 more | 2026-11-11 | 8.8 High |
| Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-111309 | 1 Microsoft | 5 365 Apps, Microsoft Office Ltsc 2021, Microsoft Office Ltsc 2024 and 2 more | 2026-11-11 | 8.8 High |
| Release of invalid pointer or reference in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-91151 | 1 Redhat | 3 Enterprise Linux, Openshift Devspaces, Rhel Els | 2026-11-11 | 7.3 High |
| A flaw was found in Cockpit. A local authenticated user with control over a target account's home directory can exploit a privileged symlink dereference vulnerability in the `ssh-add-public-key.sh` helper. When this helper runs with elevated privileges, it can be tricked into following attacker-controlled symlinks within the `.ssh` or `authorized_keys` paths. This allows the attacker to arbitrarily change file ownership and modes, potentially leading to local privilege escalation and impacting the integrity, confidentiality, and availability of the system. | ||||
| CVE-2026-118140 | 1 Microsoft | 4 Windows Server 2016, Windows Server 2019, Windows Server 2022 and 1 more | 2026-11-11 | 5.5 Medium |
| Improper access control in Windows Server for NFS allows an authorized attacker to disclose information locally. | ||||
| CVE-2026-118141 | 1 Microsoft | 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more | 2026-11-11 | 8.8 High |
| Stack-based buffer overflow in Windows Client for NFS allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-118144 | 1 Microsoft | 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more | 2026-11-11 | 6.6 Medium |
| Heap-based buffer overflow in Windows Smart Card allows an authorized attacker to elevate privileges with a physical attack. | ||||
| CVE-2026-118145 | 1 Microsoft | 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more | 2026-11-11 | 7.5 High |
| Use after free in Windows Function Discovery SSDP Provider allows an unauthorized attacker to execute code over an adjacent network. | ||||
| CVE-2026-118704 | 1 Microsoft | 6 365 Apps, Office 2021, Office 2024 and 3 more | 2026-11-11 | 8.8 High |
| Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-112715 | 1 Microsoft | 10 365 Apps, Microsoft Office Ltsc 2021, Microsoft Office Ltsc 2024 and 7 more | 2026-11-11 | 8.8 High |
| Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-112718 | 1 Microsoft | 10 365 Apps, Microsoft Office Ltsc 2021, Microsoft Office Ltsc 2024 and 7 more | 2026-11-11 | 8.8 High |
| Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-112722 | 1 Microsoft | 10 365 Apps, Microsoft Office Ltsc 2021, Microsoft Office Ltsc 2024 and 7 more | 2026-11-11 | 8.8 High |
| Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-112726 | 1 Microsoft | 11 365 Apps, Microsoft Office 365 For Mac, Microsoft Office Ltsc 2021 and 8 more | 2026-11-11 | 8.8 High |
| Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-112731 | 1 Microsoft | 10 365 Apps, Microsoft Office Ltsc 2021, Microsoft Office Ltsc 2024 and 7 more | 2026-11-11 | 6.5 Medium |
| Buffer over-read in Microsoft Office allows an unauthorized attacker to disclose information over a network. | ||||
| CVE-2024-12740 | 2026-11-11 | 7.8 High | ||
| Vision-related software from NI used a third-party library for image processing that exposes several vulnerabilities. These vulnerabilities may result in arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted file. | ||||
| CVE-2026-126815 | 1 Xauendevs | 1 Lagarto Chivato | 2026-11-11 | 8.1 High |
| Pre-account hijacking in the authentication flow in Lagarto Chivato 0.4.1 and earlier on Web allows remote unauthenticated attackers to take over arbitrary accounts via a password planted on an unregistered email address that becomes valid upon the victim’s first passwordless login. | ||||
| CVE-2025-4748 | 1 Erlang | 2 Erlang\/otp, Otp | 2026-11-11 | N/A |
| Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Erlang OTP (stdlib modules) allows Absolute Path Traversal, File Manipulation. This vulnerability is associated with program files lib/stdlib/src/zip.erl and program routines zip:unzip/1, zip:unzip/2, zip:extract/1, zip:extract/2 unless the memory option is passed. This issue affects OTP from OTP 17.0 before OTP 26.2.5.13, OTP 27.3.4.1, and OTP 28.0.1, corresponding to stdlib from 2.0 before 5.2.3.4, 6.2.2.1, and 7.0.1. | ||||
| CVE-2026-0323 | 1 Palo Alto Networks | 1 Checkov By Prisma Cloud | 2026-11-11 | N/A |
| A server-side request forgery vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a local unauthenticated user to make unauthorized network requests from host to internal services. | ||||
| CVE-2026-0324 | 1 Opswat | 1 Metadefender Endpoint Security Sdk | 2026-11-11 | N/A |
| An incorrect privilege management vulnerability in the OPSWAT MetaDefender Endpoint Security SDK used by the Palo Alto Networks GlobalProtect™ app on Windows devices allows a locally authenticated non-administrative Windows user to escalate their privileges to NT AUTHORITY\SYSTEM. | ||||
| CVE-2026-118220 | 1 Microsoft | 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more | 2026-11-11 | 7.8 High |
| Double free in Windows Multiple Provider Router allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-118149 | 1 Microsoft | 1 Exchange Server Se | 2026-11-11 | 8.8 High |
| Improper control of generation of code ('code injection') in Microsoft Exchange Server allows an authorized attacker to execute code over a network. | ||||