Browse All CVEs
11,591 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-4344 |
high | 7.1 | 0.0020 | 2026-10-29 | A maliciously crafted HTML payload in a component name, when displayed during the delete c | |
CVE-2026-4345 |
high | 7.1 | 0.0020 | 2026-10-29 | A maliciously crafted HTML payload, stored in a design name and exported to CSV, can trigg | |
CVE-2026-4369 |
high | 7.1 | 0.0020 | 2026-10-29 | A maliciously crafted HTML payload in an assembly variant name, when displayed during the | |
CVE-2026-22155 |
high | 7.5 | 0.0017 | 2026-10-29 | A cleartext transmission of sensitive information vulnerability in Fortinet FortiSOAR PaaS | |
CVE-2026-22828 |
high | 8.1 | 0.0090 | 2026-10-29 | A heap-based buffer overflow vulnerability in Fortinet FortiAnalyzer Cloud 7.6.2 through 7 | |
CVE-2026-23708 |
high | 8.1 | 0.0028 | 2026-10-29 | A improper authentication vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, Fo | |
CVE-2026-39815 |
high | 8.8 | 0.0036 | 2026-10-29 | A improper neutralization of special elements used in an sql command ('sql injection') vul | |
CVE-2026-27238 |
high | 7.8 | 0.0018 | 2026-10-29 | InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by a Heap-based Buffer Ove | |
CVE-2026-27283 |
high | 7.8 | 0.0016 | 2026-10-29 | InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by a Use After Free vulner | |
CVE-2026-27284 |
high | 7.8 | 0.0016 | 2026-10-29 | InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by an out-of-bounds read v | |
CVE-2026-27291 |
high | 7.8 | 0.0014 | 2026-10-29 | InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by an out-of-bounds write | |
CVE-2026-34622 |
high | 8.6 | 0.0042 | 2026-10-29 | Acrobat Reader versions 26.001.21411, 24.001.30360, 24.001.30362 and earlier are affected | |
CVE-2026-0207 |
high | 8.5 | 0.0038 | 2026-10-29 | A vulnerability exists in FlashBlade whereby sensitive information may be logged under spe | |
CVE-2026-20930 |
high | 7.8 | 0.0019 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-23657 |
high | 7.8 | 0.0041 | 2026-10-29 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code lo | |
CVE-2026-25184 |
high | 7.0 | 0.0018 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-26143 |
high | 7.8 | 0.0054 | 2026-10-29 | Improper input validation in Microsoft PowerShell allows an unauthorized attacker to bypas | |
CVE-2026-26151 |
high | 7.1 | 0.0083 | 2026-10-29 | Insufficient ui warning of dangerous operations in Windows Remote Desktop allows an unauth | |
CVE-2026-26152 |
high | 7.0 | 0.0023 | 2026-10-29 | Insecure storage of sensitive information in Windows Cryptographic Services allows an auth | |
CVE-2026-26153 |
high | 7.8 | 0.0029 | 2026-10-29 | Out-of-bounds read in Windows Encrypting File System (EFS) allows an authorized attacker t | |
CVE-2026-26154 |
high | 7.5 | 0.0106 | 2026-10-29 | Improper input validation in Windows Server Update Service allows an unauthorized attacker | |
CVE-2026-26156 |
high | 7.8 | 0.0041 | 2026-10-29 | Heap-based buffer overflow in Windows Hyper-V allows an unauthorized attacker to execute c | |
CVE-2026-26159 |
high | 7.8 | 0.0026 | 2026-10-29 | Missing authentication for critical function in Windows Remote Desktop Licensing Service a | |
CVE-2026-26160 |
high | 7.8 | 0.0027 | 2026-10-29 | Missing authentication for critical function in Windows Remote Desktop Licensing Service a | |
CVE-2026-26161 |
high | 7.8 | 0.0030 | 2026-10-29 | Untrusted pointer dereference in Windows Sensor Data Service allows an authorized attacker | |
CVE-2026-26162 |
high | 7.8 | 0.0030 | 2026-10-29 | Access of resource using incompatible type ('type confusion') in Windows OLE allows an aut | |
CVE-2026-26163 |
high | 7.8 | 0.0030 | 2026-10-29 | Double free in Windows Kernel allows an authorized attacker to elevate privileges locally. | |
CVE-2026-26165 |
high | 7.0 | 0.0025 | 2026-10-29 | Use after free in Windows Shell allows an authorized attacker to elevate privileges locall | |
CVE-2026-26166 |
high | 7.0 | 0.0024 | 2026-10-29 | Double free in Windows Shell allows an authorized attacker to elevate privileges locally. | |
CVE-2026-26167 |
high | 7.8 | 0.0018 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-26168 |
high | 7.8 | 0.0018 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-26170 |
high | 7.8 | 0.0023 | 2026-10-29 | Improper input validation in Microsoft PowerShell allows an authorized attacker to elevate | |
CVE-2026-26172 |
high | 7.8 | 0.0015 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-26173 |
high | 7.0 | 0.0016 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-26174 |
high | 7.0 | 0.0019 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-26176 |
high | 7.8 | 0.0023 | 2026-10-29 | Heap-based buffer overflow in Windows Client Side Caching driver (csc.sys) allows an autho | |
CVE-2026-26177 |
high | 7.0 | 0.0020 | 2026-10-29 | Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attac | |
CVE-2026-26178 |
high | 8.8 | 0.0042 | 2026-10-29 | Integer size truncation in Windows Advanced Rasterization Platform (WARP) allows an unauth | |
CVE-2026-26179 |
high | 7.8 | 0.0044 | 2026-10-29 | Double free in Windows Kernel allows an authorized attacker to elevate privileges locally. | |
CVE-2026-26180 |
high | 7.8 | 0.0030 | 2026-10-29 | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate priv | |
CVE-2026-26181 |
high | 7.8 | 0.0023 | 2026-10-29 | Use after free in Microsoft Brokering File System allows an authorized attacker to elevate | |
CVE-2026-26182 |
high | 7.0 | 0.0020 | 2026-10-29 | Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attac | |
CVE-2026-26183 |
high | 7.8 | 0.0026 | 2026-10-29 | Improper access control in Windows RPC API allows an authorized attacker to elevate privil | |
CVE-2026-26184 |
high | 7.8 | 0.0024 | 2026-10-29 | Buffer over-read in Windows Projected File System allows an authorized attacker to elevate | |
CVE-2026-27907 |
high | 7.8 | 0.0030 | 2026-10-29 | Integer underflow (wrap or wraparound) in Windows Storage Spaces Controller allows an auth | |
CVE-2026-27908 |
high | 7.0 | 0.0155 | 2026-10-29 | Use after free in Windows TDI Translation Driver (tdx.sys) allows an authorized attacker t | |
CVE-2026-27909 |
high | 7.8 | 0.0177 | 2026-10-29 | Use after free in Microsoft Windows Search Component allows an authorized attacker to elev | |
CVE-2026-27910 |
high | 7.8 | 0.0021 | 2026-10-29 | Improper handling of insufficient permissions or privileges in Windows Installer allows an | |
CVE-2026-27911 |
high | 7.8 | 0.0015 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-27912 |
high | 8.0 | 0.0041 | 2026-10-29 | Improper authorization in Windows Kerberos allows an authorized attacker to elevate privil |