Export limit exceeded: 424978 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 424978 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (424978 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-118126 | 1 Microsoft | 23 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 20 more | 2026-11-12 | 7.8 High |
| Use after free in Windows Message Queuing allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-92443 | 2026-11-12 | N/A | ||
| The caching plugins in Kong Gateway Enterprise and Kong AI Gateway may serve a response cached for a request carrying an Authorization or Proxy-Authorization to different callers. | ||||
| CVE-2026-92441 | 2026-11-12 | N/A | ||
| Kong Gateway Enterprise and Kong AI Gateway include decoded CR/LF characters from the request path in the X-Forwarded-Prefix header on regex Routes, allowing HTTP header injection and request smuggling to the upstream. | ||||
| CVE-2026-118142 | 1 Microsoft | 12 Windows 11 23h2, Windows 11 23h2, Windows 11 24h2 and 9 more | 2026-11-12 | 7.8 High |
| Out-of-bounds read in Windows Distributed File System (DFS) allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-118213 | 1 Microsoft | 7 Windows Server 2016, Windows Server 2016 (server Core Installation), Windows Server 2019 and 4 more | 2026-11-12 | 5.9 Medium |
| Relative path traversal in Windows Deployment Services allows an unauthorized attacker to disclose information over a network. | ||||
| CVE-2026-118214 | 1 Microsoft | 20 Windows 10 1809, Windows 10 21h2, Windows 10 21h2 and 17 more | 2026-11-12 | 6.5 Medium |
| Use of uninitialized resource in Windows Advanced Rasterization Platform allows an authorized attacker to disclose information locally. | ||||
| CVE-2026-95397 | 2026-11-12 | N/A | ||
| In sub_layer_hrd_parameters of hevc_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. This could lead to local escalation of privilege with execution privileges needed. User interaction is for exploitation. | ||||
| CVE-2026-95399 | 2026-11-12 | N/A | ||
| In multiple functions of face_status.h, there is a possible way to modify verified biometric enrollment data in shared memory due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. | ||||
| CVE-2026-95401 | 2026-11-12 | N/A | ||
| In knee_function_info of hevc_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. This could lead to local escalation of privilege with execution privileges needed. User interaction is for exploitation. | ||||
| CVE-2026-95402 | 2026-11-12 | N/A | ||
| In slice_header of hevc_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. This could lead to local escalation of privilege with execution privileges needed. User interaction is for exploitation. | ||||
| CVE-2026-95404 | 2026-11-12 | 6.7 Medium | ||
| In multiple locations, there is a possible way to modify coprocessor instruction and data memory from non-secure software due to an insecure default value. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. | ||||
| CVE-2026-95405 | 2026-11-12 | N/A | ||
| In acquireMemory of bt_bqr_offload.cc, there is a possible way to trigger an out of bounds write via a buffer size underflow due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. | ||||
| CVE-2026-95780 | 2026-11-12 | 8.1 High | ||
| A vulnerability exists in the authentication and session-management mechanisms that may result in access not being fully terminated following certain account or session state changes. Under specific conditions, a remote user with prior legitimate access could retain access to protected system resources beyond the intended authorization period. Successful exploitation could result in continued unauthorized access. | ||||
| CVE-2026-95781 | 2026-11-12 | 7.5 High | ||
| A security vulnerability exists in AthonetOS that may allow an unauthorized party to affect service operation or gain access to certain protected system functions. Successful exploitation could result in a compromise of service integrity or unauthorized system access. | ||||
| CVE-2026-95783 | 2026-11-12 | 7.5 High | ||
| A vulnerability exists in a network-facing component that may, under certain conditions, result in service disruption. Successful exploitation could cause temporary unavailability of affected functionality. | ||||
| CVE-2026-92558 | 2026-11-12 | N/A | ||
| The proxy-cache and proxy-cache-advanced plugins in Kong Gateway Enterprise and Kong AI Gateway do not escape separator characters when building the cache key, allowing a remote attacker to cause a response cached for one request to be served for a different request on the same Route. | ||||
| CVE-2026-118154 | 1 Microsoft | 2 Exchange Server Se, Microsoft Exchange Server Subscription Edition Rtm | 2026-11-12 | 8.8 High |
| Reliance on untrusted inputs in a security decision in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network. | ||||
| CVE-2026-116934 | 1 Microsoft | 10 Microsoft Sql Server 2017 For X64-based Systems \(cu31\), Microsoft Sql Server 2019 (gdr), Microsoft Sql Server 2019 For X64-based Systems \(cu32\) and 7 more | 2026-11-12 | 8.8 High |
| Untrusted pointer dereference in SQL Server allows an authorized attacker to elevate privileges over a network. | ||||
| CVE-2026-116937 | 1 Microsoft | 8 Microsoft Sql Server 2017 For X64-based Systems \(cu31\), Microsoft Sql Server 2019 For X64-based Systems \(cu32\), Microsoft Sql Server 2022 For X64-based Systems \(cu27\) and 5 more | 2026-11-12 | 7.5 High |
| Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. | ||||
| CVE-2026-95785 | 2026-11-12 | 7.2 High | ||
| A vulnerability exists in a system component that may, under certain conditions, allow an authorized user to make unauthorized changes to system-managed content. Successful exploitation could affect system confidentiality, integrity, and availability, and may disrupt trusted interactions among system functions. | ||||