Export limit exceeded: 27572 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (27572 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-81993 3 Adobe, Apple, Microsoft 5 Acrobat, Acrobat Dc, Acrobat Reader Dc and 2 more 2026-09-10 5.5 Medium
Acrobat Reader is affected by a Heap-based Buffer Overflow vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-72928 1 Microsoft 2 Windows Server 2025, Windows Server 2025 (server Core Installation) 2026-09-10 7.5 High
Use after free in Windows DNS allows an authorized attacker to execute code over a network.
CVE-2026-80073 1 Microsoft 8 365 Apps, Microsoft Office Ltsc 2021, Microsoft Office Ltsc 2024 and 5 more 2026-09-10 6.5 Medium
Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network.
CVE-2026-80085 1 Microsoft 12 365, 365 Apps, Microsoft 365 and 9 more 2026-09-10 8.8 High
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-81395 1 Microsoft 12 365, 365 Apps, Excel and 9 more 2026-09-10 5.5 Medium
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-81959 1 Microsoft 12 365, 365 Apps, Excel and 9 more 2026-09-10 7.8 High
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-78503 1 Microsoft 15 365 Apps, Microsoft 365, Microsoft Office 365 For Mac and 12 more 2026-09-10 6.5 Medium
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-78520 1 Microsoft 13 365, 365 Apps, Microsoft 365 and 10 more 2026-09-10 6.5 Medium
Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-81957 1 Microsoft 15 365 Apps, Excel, Excel 2016 and 12 more 2026-09-10 7.8 High
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-81401 1 Microsoft 13 365, 365 Apps, Excel and 10 more 2026-09-10 5.5 Medium
Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-81388 1 Microsoft 18 365, 365 Apps, Excel and 15 more 2026-09-10 7.8 High
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-81391 1 Microsoft 14 365 Apps, Excel, Excel 2016 and 11 more 2026-09-10 5.5 Medium
Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-81393 1 Microsoft 14 365 Apps, Excel, Excel 2016 and 11 more 2026-09-10 5.5 Medium
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-69734 1 Microsoft 12 365, 365 Apps, Microsoft 365 and 9 more 2026-09-10 6.5 Medium
Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-69671 1 Microsoft 10 365 Apps, Microsoft 365, Office 2019 and 7 more 2026-09-09 8.8 High
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-73029 1 Microsoft 6 Microsoft Sql Server 2019 (gdr), Microsoft Sql Server 2022 (gdr), Microsoft Sql Server 2025 For X64-based Systems (gdr) and 3 more 2026-09-09 6.5 Medium
Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-87653 2 Google, Microsoft 2 Chrome, Windows 2026-09-09 5.4 Medium
UI misrepresentation in FullScreen in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-72974 1 Microsoft 9 365 Apps, Microsoft 365, Office 2016 and 6 more 2026-09-09 6.5 Medium
Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-62810 1 Microsoft 26 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 23 more 2026-09-09 7.8 High
Heap-based buffer overflow in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges locally.
CVE-2026-65669 1 Microsoft 1 Sql Server Management Studio 2026-09-09 9.6 Critical
Improper neutralization of special elements in output used by a downstream component ('injection') in SQL Server allows an unauthorized attacker to elevate privileges over a network.