Export limit exceeded: 415064 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 415064 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 415064 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 415064 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 415064 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (415064 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-58752 | 2026-11-12 | N/A | ||
| In aoc_unlocked_ioctl_handle_ion_fd of aoc.c, there is a possible type confusion due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. | ||||
| CVE-2026-58757 | 2026-11-12 | N/A | ||
| In mfc_alloc_enc_roi_buffer of mfc_buf.c, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. | ||||
| CVE-2026-58780 | 2026-11-12 | N/A | ||
| In multiple locations, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. | ||||
| CVE-2026-58799 | 2026-11-12 | N/A | ||
| In multiple functions of rmmi_utility.c, there is a possible way to trigger an out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. | ||||
| CVE-2026-58800 | 2026-11-12 | N/A | ||
| In IMG_vkCreateImageView of image_view.c, there is a possible way to trigger a use after free due to memory corruption. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. | ||||
| CVE-2026-112973 | 1 Microsoft | 23 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 20 more | 2026-11-12 | 7.1 High |
| Improper access control in Windows Kernel allows an authorized attacker to bypass a security feature locally. | ||||
| CVE-2026-113748 | 1 Microsoft | 20 Windows 10 1809, Windows 10 21h2, Windows 10 21h2 and 17 more | 2026-11-12 | 7.8 High |
| Stack-based buffer overflow in Software Protection Platform (SPP) allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-113750 | 1 Microsoft | 23 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 20 more | 2026-11-12 | 7 High |
| Heap-based buffer overflow in Windows Device Inventory allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-113752 | 1 Microsoft | 23 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 20 more | 2026-11-12 | 7.5 High |
| Use after free in Windows Print Spooler Components allows an unauthorized attacker to execute code over an adjacent network. | ||||
| CVE-2026-113753 | 1 Microsoft | 2 Windows 11 26h1, Windows 11 26h1 | 2026-11-12 | 8.2 High |
| Untrusted pointer dereference in Windows Hyper-V allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-113756 | 1 Microsoft | 23 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 20 more | 2026-11-12 | 5.3 Medium |
| Improper access control in Windows FileCrypt Driver allows an authorized attacker to bypass a security feature over a network. | ||||
| CVE-2026-113763 | 1 Microsoft | 23 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 20 more | 2026-11-12 | 6.3 Medium |
| Use of a broken or risky cryptographic algorithm in Windows DPAPI (Data Protection Application Programming Interface) allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2023-41175 | 3 Fedoraproject, Libtiff, Redhat | 4 Fedora, Libtiff, Enterprise Linux and 1 more | 2026-11-12 | 6.5 Medium |
| A vulnerability was found in libtiff due to multiple potential integer overflows in raw2tiff.c. This flaw allows remote attackers to cause a denial of service or possibly execute an arbitrary code via a crafted tiff image, which triggers a heap-based buffer overflow. | ||||
| CVE-2026-117687 | 2026-11-12 | N/A | ||
| Movable Type provided by Six Apart Ltd. contains a code injection vulnerability in its Dynamic Publishing functionality. By sending a specially crafted request that is processed by the Dynamic Publishing, an attacker may be able to execute arbitrary PHP code on the affected product. | ||||
| CVE-2026-58801 | 2026-11-12 | N/A | ||
| In smmu_domain_config_s1 of arm-smmu-v3.c, there is a possible way to access stale stream table entries across reassigned stream identifiers due to a logic error. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. | ||||
| CVE-2026-58804 | 2026-11-12 | N/A | ||
| In ExecuteGraphCommand of multiple files, there is a possible way to trigger an out of bounds write via an oversized scratch memory declaration due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. | ||||
| CVE-2026-58805 | 2026-11-12 | N/A | ||
| In multiple locations, there is a possible way to zero arbitrary secure memory via unvalidated image body addresses due to a missing bounds check. This could lead to physical escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. | ||||
| CVE-2026-58806 | 2026-11-12 | N/A | ||
| In get_sswrp_state of cpm_mbox_srv/main.c, there is a possible Logic error due to a logic error in the code. This could lead to local information disclosure with execution privileges needed. User interaction is for exploitation. | ||||
| CVE-2026-58808 | 2026-11-12 | N/A | ||
| In multiple locations, there is a possible way to dump secure cache lines into non-secure memory on warm reset due to a missing permission check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. | ||||
| CVE-2026-58810 | 2026-11-12 | N/A | ||
| In multiple functions of simd_ctx.c, there is a possible way to disclose secure vector predicate and fault registers to non-secure callers due to uninitialized data. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. | ||||