Export limit exceeded: 29269 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 12753 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 424788 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Expected end of text, found '/' (at char 34), (line:1, col:35)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (424788 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-86364 2026-11-11 4.7 Medium
Dell Live Optics Collector, versions prior to 27.3.8.317 contains a Use of Insufficiently Random Values vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure.
CVE-2026-106156 2026-11-11 8.6 High
In Progress® Telerik® UI for ASP.NET Core versions `2015.1.318` through `2026.3.811`, repeated server-side aggregation requests, with or without grouping, cause dynamic assemblies and load contexts to be retained, resulting in accumulating process memory consumption. An unauthenticated remote attacker can exploit this if the application exposes an aggregation endpoint that is reachable without authentication. Repeated requests can cause memory growth that may exhaust available resources and affect application availability. Disabling grouping in the client-side interface does not prevent direct requests containing these descriptors. The issue is fixed in version `2026.3.1015`.
CVE-2026-119855 1 Microsoft 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more 2026-11-11 5.5 Medium
Buffer over-read in Windows COM+ Event System Service allows an authorized attacker to disclose information locally.
CVE-2026-123384 1 Microsoft 3 365 Apps, Office 2021, Office 2024 2026-11-11 8.8 High
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-123379 1 Microsoft 3 365 Apps, Office 2021, Office 2024 2026-11-11 7.5 High
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-123378 1 Microsoft 3 365 Apps, Office 2021, Office 2024 2026-11-11 7.5 High
Integer overflow or wraparound in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-123377 1 Microsoft 3 365 Apps, Office 2021, Office 2024 2026-11-11 8.8 High
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-123376 1 Microsoft 3 365 Apps, Office 2021, Office 2024 2026-11-11 8.8 High
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-123375 1 Microsoft 3 365 Apps, Office 2021, Office 2024 2026-11-11 8.8 High
Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-120791 1 Microsoft 6 365 Apps, Office 2021, Office 2024 and 3 more 2026-11-11 8.8 High
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-120790 1 Microsoft 6 365 Apps, Office 2021, Office 2024 and 3 more 2026-11-11 8.8 High
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-120789 1 Microsoft 6 365 Apps, Office 2021, Office 2024 and 3 more 2026-11-11 8.8 High
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-120788 1 Microsoft 6 365 Apps, Office 2021, Office 2024 and 3 more 2026-11-11 8.8 High
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-120786 1 Microsoft 6 365 Apps, Office 2021, Office 2024 and 3 more 2026-11-11 8.8 High
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-120785 1 Microsoft 6 365 Apps, Office 2021, Office 2024 and 3 more 2026-11-11 8.8 High
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-120005 1 Microsoft 3 365 Apps, Office 2021, Office 2024 2026-11-11 8.8 High
Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
CVE-2026-119986 1 Microsoft 6 365 Apps, Office 2021, Office 2024 and 3 more 2026-11-11 8.8 High
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-119982 1 Microsoft 1 Visual Studio Code 2026-11-11 6.5 Medium
Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-119981 1 Microsoft 1 Visual Studio Code 2026-11-11 7 High
Missing authentication for critical function in Visual Studio Code allows an authorized attacker to elevate privileges locally.
CVE-2026-119976 1 Microsoft 1 Visual Studio Code 2026-11-11 6.5 Medium
External control of file name or path in Visual Studio Code - GitHub Pull Requests and Issues Extension allows an unauthorized attacker to disclose information over a network.