Export limit exceeded: 424651 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 424651 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 424651 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Expected end of text, found ':' (at char 24), (line:1, col:25)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (424651 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-118141 1 Microsoft 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more 2026-11-11 8.8 High
Stack-based buffer overflow in Windows Client for NFS allows an unauthorized attacker to execute code over a network.
CVE-2026-118142 1 Microsoft 6 Windows 11 23h2, Windows 11 24h2, Windows 11 25h2 and 3 more 2026-11-11 7.8 High
Out-of-bounds read in Windows Distributed File System (DFS) allows an authorized attacker to elevate privileges locally.
CVE-2026-118144 1 Microsoft 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more 2026-11-11 6.6 Medium
Heap-based buffer overflow in Windows Smart Card allows an authorized attacker to elevate privileges with a physical attack.
CVE-2026-118145 1 Microsoft 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more 2026-11-11 7.5 High
Use after free in Windows Function Discovery SSDP Provider allows an unauthorized attacker to execute code over an adjacent network.
CVE-2026-118146 1 Microsoft 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more 2026-11-11 8.8 High
Incorrect authorization in Active Directory Domain Services allows an authorized attacker to execute code over a network.
CVE-2026-118301 1 Microsoft 6 365 Apps, Office 2021, Office 2024 and 3 more 2026-11-11 7.5 High
Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-118700 1 Microsoft 6 365 Apps, Office 2021, Office 2024 and 3 more 2026-11-11 8.8 High
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-118702 1 Microsoft 6 365 Apps, Office 2021, Office 2024 and 3 more 2026-11-11 8.8 High
Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-118703 1 Microsoft 6 365 Apps, Office 2021, Office 2024 and 3 more 2026-11-11 8.8 High
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-118704 1 Microsoft 6 365 Apps, Office 2021, Office 2024 and 3 more 2026-11-11 8.8 High
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-118705 1 Microsoft 6 365 Apps, Office 2021, Office 2024 and 3 more 2026-11-11 8.8 High
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-112715 1 Microsoft 10 365 Apps, Microsoft Office Ltsc 2021, Microsoft Office Ltsc 2024 and 7 more 2026-11-11 8.8 High
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-112718 1 Microsoft 10 365 Apps, Microsoft Office Ltsc 2021, Microsoft Office Ltsc 2024 and 7 more 2026-11-11 8.8 High
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-112722 1 Microsoft 10 365 Apps, Microsoft Office Ltsc 2021, Microsoft Office Ltsc 2024 and 7 more 2026-11-11 8.8 High
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-112726 1 Microsoft 11 365 Apps, Microsoft Office 365 For Mac, Microsoft Office Ltsc 2021 and 8 more 2026-11-11 8.8 High
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-112731 1 Microsoft 10 365 Apps, Microsoft Office Ltsc 2021, Microsoft Office Ltsc 2024 and 7 more 2026-11-11 6.5 Medium
Buffer over-read in Microsoft Office allows an unauthorized attacker to disclose information over a network.
CVE-2024-12740 2026-11-11 7.8 High
Vision-related software from NI used a third-party library for image processing that exposes several vulnerabilities. These vulnerabilities may result in arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted file.
CVE-2026-126815 1 Xauendevs 1 Lagarto Chivato 2026-11-11 8.1 High
Pre-account hijacking in the authentication flow in Lagarto Chivato 0.4.1 and earlier on Web allows remote unauthenticated attackers to take over arbitrary accounts via a password planted on an unregistered email address that becomes valid upon the victim’s first passwordless login.
CVE-2025-4748 1 Erlang 2 Erlang\/otp, Otp 2026-11-11 N/A
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Erlang OTP (stdlib modules) allows Absolute Path Traversal, File Manipulation. This vulnerability is associated with program files lib/stdlib/src/zip.erl and program routines zip:unzip/1, zip:unzip/2, zip:extract/1, zip:extract/2 unless the memory option is passed. This issue affects OTP from OTP 17.0 before OTP 26.2.5.13, OTP 27.3.4.1, and OTP 28.0.1, corresponding to stdlib from 2.0 before 5.2.3.4, 6.2.2.1, and 7.0.1.
CVE-2026-0323 1 Palo Alto Networks 1 Checkov By Prisma Cloud 2026-11-11 N/A
A server-side request forgery vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a local unauthenticated user to make unauthorized network requests from host to internal services.