Export limit exceeded: 10551 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (10551 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2023-36895 1 Microsoft 8 365 Apps, Office, Office 2016 and 5 more 2026-08-10 7.8 High
Microsoft Outlook Remote Code Execution Vulnerability
CVE-2023-29328 1 Microsoft 1 Teams 2026-08-10 8.8 High
Microsoft Teams Remote Code Execution Vulnerability
CVE-2023-29330 1 Microsoft 1 Teams 2026-08-10 8.8 High
Microsoft Teams Remote Code Execution Vulnerability
CVE-2024-21375 1 Microsoft 23 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 20 more 2026-08-10 8.8 High
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVE-2023-38169 1 Microsoft 9 Odbc Driver 17 For Sql Server, Odbc Driver 18 For Sql Server, Odbc Driver For Sql Server and 6 more 2026-08-10 8.8 High
Microsoft SQL OLE DB Remote Code Execution Vulnerability
CVE-2023-35380 1 Microsoft 19 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 16 more 2026-08-10 7.8 High
Windows Kernel Elevation of Privilege Vulnerability
CVE-2023-36882 1 Microsoft 19 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 16 more 2026-08-10 8.8 High
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVE-2021-34498 1 Microsoft 19 Windows 10, Windows 10 1507, Windows 10 1607 and 16 more 2026-08-10 7.8 High
Windows GDI Elevation of Privilege Vulnerability
CVE-2021-38656 1 Microsoft 1 365 Apps 2026-08-10 7.8 High
Microsoft Word Remote Code Execution Vulnerability
CVE-2021-38655 1 Microsoft 9 365 Apps, Excel, Excel 2013 and 6 more 2026-08-10 7.8 High
Microsoft Excel Remote Code Execution Vulnerability
CVE-2021-34486 1 Microsoft 11 Windows 10 1809, Windows 10 1909, Windows 10 2004 and 8 more 2026-08-10 7.8 High
Windows Event Tracing Elevation of Privilege Vulnerability
CVE-2026-64601 1 Linux 1 Linux Kernel 2026-08-08 7.8 High
In the Linux kernel, the following vulnerability has been resolved: ALSA: us144mkii: capture_urb_complete: redundant usb_anchor_urb corrupts anchor list on each resubmission In capture_urb_complete(), usb_anchor_urb() is called on every completion callback, but the URB is already anchored from the initial submission in tascam_trigger_start(). Each redundant call corrupts the anchor's doubly-linked list and inflates the URB refcount. When usb_kill_anchored_urbs() traverses the list during stream stop / suspend / disconnect, the corrupted list leads to use-after-free. Remove the redundant usb_anchor_urb() from the resubmit path.
CVE-2026-19175 1 Google 1 Chrome 2026-08-08 9.6 Critical
Use after free in Payments in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-19171 2 Google, Microsoft 2 Chrome, Windows 2026-08-08 9.6 Critical
Use after free in Media in Google Chrome on Windows prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-19166 1 Google 1 Chrome 2026-08-08 9.6 Critical
Use after free in Web Authentication in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-19159 1 Google 1 Chrome 2026-08-08 7.5 High
Use after free in Views in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2026-19158 2 Google, Microsoft 2 Chrome, Windows 2026-08-08 7.5 High
Use after free in Views in Google Chrome on Windows prior to 151.0.7922.109 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2026-19141 1 Google 2 Android, Chrome 2026-08-08 8.3 High
Use after free in Resources in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-19108 2 Mz-automation, Mz Automation 2 Libiec61850, Libiec61850 2026-08-08 5.3 Medium
A vulnerability was found in MZ Automation libiec61850 up to 1.6.1. The affected element is the function deleteDataSetValuesShadowBuffer of the file src/iec61850/server/mms_mapping/reporting.c of the component URCB Revalidation. The manipulation results in use after free. The attack needs to be approached locally. The exploit has been made public and could be used. Upgrading to version 1.6.2 is sufficient to fix this issue. The patch is identified as 486fd57f3aed65bb9d636ff00f9ddce2e450b168. Upgrading the affected component is advised.
CVE-2026-71847 1 Ruby 1 Json 2026-08-07 N/A
Ruby JSON is a JSON implementation for Ruby. From 2.20.0 until 2.21.2, Ruby's JSON native C extension clears the consumed JSON::ResumableParser input buffer but leaves state.start, state.cursor, and state.end pointing into released storage. When partial_value reconstructs an incomplete object containing duplicate keys, the duplicate-key warning path calls cursor_position, which dereferences those stale pointers. This results in a heap-use-after-free and can terminate the Ruby process. An attacker who can supply JSON stream data to an application using JSON::ResumableParser may cause process termination when the application calls partial_value on incomplete attacker-controlled input containing duplicate object keys. This issue has been fixed in version 2.21.2.