Search
151,644 CVEs · High severity
CVEs (151,644, showing first 500)
Only the first 500 CVEs (by current sort) are shown when searching without a keyword. Add a search term above to narrow the results.
Showing 226–250 of 151,644 (capped at 500)
| CVE ID ↓ | Severity | Patch | CVSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-97807 | HIGH | Patched | 7.8 | 2026-10-13 | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-97806 | HIGH | Patched | 7.8 | 2026-10-13 | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-97804 | HIGH | Patched | 7.8 | 2026-10-13 | Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-97803 | HIGH | Patched | 7.8 | 2026-10-13 | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-97801 | HIGH | 7.5 | 2026-10-13 | Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to perform tampering over a network. | |
| CVE-2026-97800 | HIGH | Patched | 7.8 | 2026-10-13 | Incorrect permission assignment for critical resource in Windows Mobile Broadband allows an authorized attacker to elevate privileges locally. |
| CVE-2026-9780 | HIGH | Patched | 8.8 | 2026-06-25 | Quest NetVault Backup addclient3 Cross-Site Scripting Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected i… |
| CVE-2026-97799 | HIGH | Patched | 7.8 | 2026-10-13 | Improper verification of cryptographic signature in Windows Audio Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-97798 | HIGH | Patched | 7.8 | 2026-10-13 | Improper neutralization of argument delimiters in a command ('argument injection') in Windows Error Reporting allows an authorized attacker to elevate privileges locally. |
| CVE-2026-97794 | HIGH | Patched | 7.8 | 2026-10-13 | Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-97793 | HIGH | Patched | 7.0 | 2026-10-13 | Missing authentication for critical function in Windows Setup and Deployment allows an authorized attacker to elevate privileges locally. |
| CVE-2026-97792 | HIGH | Patched | 7.8 | 2026-10-13 | Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-97791 | HIGH | Patched | 7.5 | 2026-10-09 | In Apache CXF, STSTokenValidator checks whether a SAML assertion is signed by a trusted certificate before deciding to send it to the STS. That result was stored in one obj… |
| CVE-2026-9779 | HIGH | Patched | 7.2 | 2026-06-24 | ATEN Unizon doCryptoHugeFileToFile Improper Verification of Cryptographic Signature Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execu… |
| CVE-2026-97789 | HIGH | Patched | 7.5 | 2026-10-13 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97788 | HIGH | Patched | 7.5 | 2026-10-13 | Observable discrepancy in Active Directory Federation Services (AD FS) allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-97787 | HIGH | Patched | 7.0 | 2026-10-13 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authoriz… |
| CVE-2026-97783 | HIGH | 8.1 | 2026-10-13 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over… | |
| CVE-2026-97781 | HIGH | 8.8 | 2026-10-13 | Improper neutralization of special elements used in a command ('command injection') in Microsoft Office OneNote allows an unauthorized attacker to execute code over a network. | |
| CVE-2026-97780 | HIGH | Patched | 8.8 | 2026-10-13 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-9778 | HIGH | Patched | 7.2 | 2026-06-24 | ATEN Unizon ImportDeviceList Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected insta… |
| CVE-2026-97778 | HIGH | Patched | 8.8 | 2026-10-13 | Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97777 | HIGH | Patched | 8.8 | 2026-10-13 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97776 | HIGH | Patched | 8.8 | 2026-10-13 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97775 | HIGH | Patched | 8.8 | 2026-10-13 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |