Search
16,949 CVEs
CVEs (16,949, showing first 500)
Only the first 500 CVEs (by current sort) are shown when searching without a keyword. Add a search term above to narrow the results.
Showing 451–475 of 16,949 (capped at 500)
| CVE ID | Severity | Patch | CVSS ↓ | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-70300 | CRITICAL | 9.8 | 2026-10-13 | Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | |
| CVE-2026-70291 | CRITICAL | 9.8 | 2026-10-13 | Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. | |
| CVE-2026-70242 | CRITICAL | 9.8 | 2026-10-13 | Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. | |
| CVE-2026-70157 | CRITICAL | 9.8 | 2026-10-13 | Heap-based buffer overflow in Windows System Information Console allows an unauthorized attacker to execute code over a network. | |
| CVE-2026-70153 | CRITICAL | 9.8 | 2026-10-13 | Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over a network. | |
| CVE-2026-70147 | CRITICAL | 9.8 | 2026-10-13 | Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over a network. | |
| CVE-2026-70096 | CRITICAL | 9.8 | 2026-10-13 | Heap-based buffer overflow in Windows Rich Text Edit Control allows an unauthorized attacker to execute code over a network. | |
| CVE-2026-70024 | CRITICAL | Patched | 9.8 | 2026-10-13 | Stack-based buffer overflow in Windows Internet Information Services allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69883 | CRITICAL | Patched | 9.8 | 2026-10-13 | Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69886 | CRITICAL | Patched | 9.8 | 2026-10-13 | Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69705 | CRITICAL | 9.8 | 2026-10-13 | Out-of-bounds write in Windows iSCSI allows an unauthorized attacker to execute code over a network. | |
| CVE-2026-69634 | CRITICAL | 9.8 | 2026-10-13 | Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network. | |
| CVE-2026-69639 | CRITICAL | 9.8 | 2026-10-13 | Heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execute code over a network. | |
| CVE-2026-105010 | CRITICAL | 9.8 | 2026-10-13 | Use after free in Microsoft Windows Search Component allows an unauthorized attacker to elevate privileges over a network. | |
| CVE-2026-105016 | CRITICAL | 9.8 | 2026-10-13 | Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network. | |
| CVE-2026-104584 | CRITICAL | 9.8 | 2026-10-13 | reNgine up to v2.2.0 and current master branch (commit de4199222cca5618f1255930ce78987e47d43a99) is vulnerable to OS Command Injection via the custom_headers scan engine co… | |
| CVE-2026-102210 | CRITICAL | Patched | 9.8 | 2026-10-13 | Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network. |
| CVE-2026-100219 | CRITICAL | Patched | 9.8 | 2026-10-13 | Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network. |
| CVE-2026-100222 | CRITICAL | Patched | 9.8 | 2026-10-13 | Heap-based buffer overflow in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network. |
| CVE-2026-100202 | CRITICAL | Patched | 9.8 | 2026-10-13 | Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network. |
| CVE-2026-37107 | CRITICAL | 9.8 | 2026-10-13 | An issue in HTMLy v.3.1.1 allows a remote attacker to escalate privileges via the get_feed function in the admin.php component | |
| CVE-2026-106173 | CRITICAL | 9.8 | 2026-10-13 | A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code o… | |
| CVE-2026-78799 | CRITICAL | 9.8 | 2026-10-13 | Directory Traversal vulnerability in Quanxun Huiju Network Technology (Beijing) Co., Ltd IK-Q3000 Enterprise-grade Wi-Fi 6 wireless router Enterprise Edition: <= iKuai8_3.7… | |
| CVE-2026-69227 | CRITICAL | 9.8 | 2026-10-13 | A flaw in Portal for ArcGIS allows unauthenticated access to certain Portal Administrator API endpoints under specific conditions. This could enable an attacker to access… | |
| CVE-2026-79608 | CRITICAL | 9.8 | 2026-10-13 | The workaround for XSA-433 (Zenbleed, CVE-2023-20593) was later re-worked to better integrate with other manipulations of the same MSR. In this rework an inverted condition… |