Export limit exceeded: 425031 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 425031 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 425031 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 425031 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Expected end of text, found 'éonie' (at char 34), (line:1, col:35)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (425031 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-119401 1 Microsoft 15 Windows 10 1809, Windows 10 21h2, Windows 10 21h2 and 12 more 2026-11-12 7 High
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
CVE-2026-119382 1 Microsoft 23 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 20 more 2026-11-12 7.8 High
Heap-based buffer overflow in Windows TPM allows an authorized attacker to elevate privileges locally.
CVE-2026-118710 1 Microsoft 11 365 Apps, Microsoft Office Ltsc 2021, Microsoft Office Ltsc 2024 and 8 more 2026-11-12 8.8 High
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-118712 1 Microsoft 11 365 Apps, Microsoft Office Ltsc 2021, Microsoft Office Ltsc 2024 and 8 more 2026-11-12 8.8 High
Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-118721 1 Microsoft 11 365 Apps, Microsoft Office Ltsc 2021, Microsoft Office Ltsc 2024 and 8 more 2026-11-12 8.8 High
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-118725 1 Microsoft 11 365 Apps, Microsoft Office Ltsc 2021, Microsoft Office Ltsc 2024 and 8 more 2026-11-12 8.8 High
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-118726 1 Microsoft 13 365 Apps, Microsoft 365 Apps For Enterprise, Microsoft Office 365 For Mac and 10 more 2026-11-12 8.8 High
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-118730 1 Microsoft 11 365 Apps, Microsoft Office Ltsc 2021, Microsoft Office Ltsc 2024 and 8 more 2026-11-12 8.8 High
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-118478 1 Adobe 3 Adobe Experience Manager, Experience Manager, Experience Manager Cloud Service 2026-11-12 5.4 Medium
Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field. Scope is changed.
CVE-2026-47832 2026-11-12 N/A
The vulnerability lies in the way application credentials are handled within the BOSH deployment. bosh-openstack-cpi-release: all versions from v55 to v55.0.4 (inclusive)
CVE-2026-110086 1 Adobe 1 Premiere 2026-11-12 7.8 High
Premiere Pro is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-110088 1 Adobe 1 Premiere 2026-11-12 7.8 High
Premiere Pro is affected by a Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-110087 1 Adobe 1 Premiere Pro 2026-11-12 6.7 Medium
Premiere Pro is affected by a Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-110085 1 Adobe 1 Premiere 2026-11-12 7.8 High
Premiere Pro is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-118146 1 Microsoft 23 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 20 more 2026-11-12 8.8 High
Incorrect authorization in Active Directory Domain Services allows an authorized attacker to execute code over a network.
CVE-2026-118215 1 Microsoft 20 Windows 10 1809, Windows 10 21h2, Windows 10 21h2 and 17 more 2026-11-12 7.8 High
Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.
CVE-2026-118216 1 Microsoft 20 Windows 10 1809, Windows 10 21h2, Windows 10 21h2 and 17 more 2026-11-12 8.8 High
Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.
CVE-2026-118217 1 Microsoft 20 Windows 10 1809, Windows 10 21h2, Windows 10 21h2 and 17 more 2026-11-12 8.8 High
Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.
CVE-2026-118218 1 Microsoft 20 Windows 10 1809, Windows 10 21h2, Windows 10 21h2 and 17 more 2026-11-12 8.8 High
Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.
CVE-2026-40820 2 Helmholz, Mb Connect Line 4 Myrex24v2, Myrex24v2virtual, Mbconnect24 and 1 more 2026-11-12 4.9 Medium
A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getVpnData function due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality.