Search
151,643 CVEs · High severity
CVEs (151,643, showing first 500)
Only the first 500 CVEs (by current sort) are shown when searching without a keyword. Add a search term above to narrow the results.
Showing 451–475 of 151,643 (capped at 500)
| CVE ID ↓ | Severity | Patch | CVSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-97031 | HIGH | 7.5 | 2026-10-08 | Multiple ECH outer extension references are not permitted under RFC 9849; previously, a client could send a well-crafted packet that could trigger memory exhaustion in the … | |
| CVE-2026-9703 | HIGH | 7.1 | 2026-10-15 | Grafana's data source proxy did not apply role-based access control to write requests forwarded to Loki data sources. A user holding only the Viewer role on an affected Gra… | |
| CVE-2026-97024 | HIGH | 7.1 | 2026-09-29 | A path traversal vulnerability in Flatpak's handling of the files/etc directory during app deployment allows a malicious Flatpak app to cause certain host system files (suc… | |
| CVE-2026-97023 | HIGH | 7.1 | 2026-09-28 | A path traversal vulnerability in Flatpak's handling of the export/bin directory during app deployment allows a malicious Flatpak app to cause deletion of attacker-chosen f… | |
| CVE-2026-9702 | HIGH | Patched | 7.5 | 2026-06-25 | The InPost PL WordPress plugin before 1.9.1 does not verify that the request originates from the legitimate buyer before allowing the WooCommerce order parcel-locker destin… |
| CVE-2026-97017 | HIGH | Patched | 8.8 | 2026-10-13 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97012 | HIGH | 8.8 | 2026-10-13 | Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. | |
| CVE-2026-97011 | HIGH | 8.8 | 2026-10-13 | Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | |
| CVE-2026-97010 | HIGH | Patched | 8.8 | 2026-10-13 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97009 | HIGH | 7.8 | 2026-10-13 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | |
| CVE-2026-97008 | HIGH | Patched | 8.8 | 2026-10-13 | Buffer underwrite ('buffer underflow') in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97007 | HIGH | Patched | 8.8 | 2026-10-13 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97004 | HIGH | Patched | 8.8 | 2026-10-13 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97003 | HIGH | Patched | 8.8 | 2026-10-13 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97001 | HIGH | 7.8 | 2026-10-13 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. | |
| CVE-2026-9700 | HIGH | 7.5 | 2026-07-08 | The Eventer plugin for WordPress is vulnerable to time-based SQL Injection via the ‘code’ parameter in all versions up to, and including, 4.4.2 due to insufficient escaping… | |
| CVE-2026-96997 | HIGH | 7.8 | 2026-10-13 | Use after free in Microsoft Office OneNote allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-96996 | HIGH | 7.8 | 2026-10-13 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. | |
| CVE-2026-96995 | HIGH | 7.8 | 2026-10-13 | Stack-based buffer overflow in Microsoft Office Word allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-96990 | HIGH | Patched | — | 2026-10-02 | Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Erlang bindings. This issue affects Apache Thrift: before 0.25.0. Users are recomm… |
| CVE-2026-9697 | HIGH | Patched | 7.4 | 2026-06-17 | Impact: undici's ProxyAgent silently drops the requestTls option when configured with a SOCKS5 proxy URI (socks5:// or socks://). The target HTTPS connection through the SO… |
| CVE-2026-96960 | HIGH | Patched | 7.5 | 2026-10-13 | Asymmetric resource consumption (amplification) in .NET allows an unauthorized attacker to deny service over a network. |
| CVE-2026-96959 | HIGH | Patched | 7.5 | 2026-10-13 | Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network. |
| CVE-2026-96958 | HIGH | Patched | 7.5 | 2026-10-13 | Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network. |
| CVE-2026-96957 | HIGH | Patched | 8.8 | 2026-10-13 | Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network. |