Export limit exceeded: 414403 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 414403 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 414403 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 414403 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Expected end of text, found ',' (at char 12), (line:1, col:13)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (414403 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-96036 1 Microsoft 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more 2026-11-10 7.8 High
Integer overflow or wraparound in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-96035 1 Microsoft 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more 2026-11-10 7 High
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-96028 1 Microsoft 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more 2026-11-10 7.8 High
Access of resource using incompatible type ('type confusion') in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-96027 1 Microsoft 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more 2026-11-10 7 High
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-123589 1 Hickory-dns 1 Hickory-dns 2026-11-10 5.3 Medium
The DNS-over-QUIC (DoQ) server in hickory-server (hickory-dns) before 0.26.2 does not apply any timeout when reading a request message from a QUIC stream, bypassing all configured timeouts. A remote unauthenticated client can open a connection and a request stream and hold it open indefinitely, consuming server resources and causing a denial of service.
CVE-2026-96037 1 Microsoft 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more 2026-11-10 7.8 High
Heap-based buffer overflow in Windows User Manager Service allows an authorized attacker to elevate privileges locally.
CVE-2026-96029 1 Microsoft 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more 2026-11-10 7.8 High
Improper access control in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-96023 1 Microsoft 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more 2026-11-10 7.8 High
Use after free in Windows Push Notification Core allows an authorized attacker to elevate privileges locally.
CVE-2026-96022 1 Microsoft 11 Windows 10 1809, Windows 10 21h2, Windows 10 22h2 and 8 more 2026-11-10 5.6 Medium
Use of uninitialized resource in Windows Text Services Framework allows an authorized attacker to disclose information locally.
CVE-2026-96019 1 Microsoft 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more 2026-11-10 7 High
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-96017 1 Microsoft 4 Windows Server 2016, Windows Server 2019, Windows Server 2022 and 1 more 2026-11-10 4.9 Medium
Use after free in DNS Server allows an authorized attacker to deny service over a network.
CVE-2026-96016 1 Microsoft 6 Windows 11 24h2, Windows 11 25h2, Windows 11 26h1 and 3 more 2026-11-10 7.8 High
Heap-based buffer overflow in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.
CVE-2026-96020 1 Microsoft 4 Windows Server 2016, Windows Server 2019, Windows Server 2022 and 1 more 2026-11-10 8.8 High
Out-of-bounds write in DNS Server allows an authorized attacker to execute code over a network.
CVE-2026-96007 1 Microsoft 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more 2026-11-10 7 High
Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.
CVE-2026-96004 1 Microsoft 15 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 12 more 2026-11-10 7 High
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-121821 1 Ly Corporation 1 Armeria 2026-11-10 N/A
A vulnerability has been identified in armeria versions 0.84.0 through 1.42.0, where any-origin CORS policies do not enforce configured path restrictions, allowing an attacker-controlled website visited by an authenticated victim to read sensitive responses from excluded paths when credentials are enabled and the victim's browser sends authentication credentials.
CVE-2026-96002 1 Microsoft 4 Windows Server 2016, Windows Server 2019, Windows Server 2022 and 1 more 2026-11-10 8.8 High
Heap-based buffer overflow in DNS Server allows an authorized attacker to execute code over a network.
CVE-2026-95997 1 Microsoft 11 Windows 10 1809, Windows 10 21h2, Windows 10 22h2 and 8 more 2026-11-10 7.8 High
Use after free in Windows Event Logging Service allows an authorized attacker to elevate privileges locally.
CVE-2026-121006 1 Libwww-perl 1 Http-body 2026-11-10 7.5 High
HTTP::Body versions before 1.24_02 for Perl parse the trailer in quadratic time. Everything after the last chunk in the same call to add() is parsed with HTTP::Headers, which takes time quadratic in the number of fields of one name. For example, it takes several seconds to parse 16 KiB of "a:" lines. A remote attackercan exhause the CPU with a single request. HTTP::Body version 1.25 limits the size and number of lines in the trailer.
CVE-2026-95996 1 Microsoft 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more 2026-11-10 8.8 High
Integer underflow (wrap or wraparound) in Windows Bluetooth Port Driver allows an authorized attacker to elevate privileges over a network.