Browse All CVEs
3,373 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-105222 |
critical | 9.1 | 0.0019 | 2026-10-29 | The alexpechkarev/google-maps Laravel package through 12.16 disables TLS certificate verif | |
CVE-2020-37281 |
critical | 9.2 | 0.0088 | 2026-10-29 | Gravitee API Management through 4.12.22 contains an authentication bypass vulnerability th | |
CVE-2026-85614 |
critical | 9.2 | 0.0026 | 2026-10-29 | OpenPanel before 2.3.0 contains an unauthenticated server-side request forgery vulnerabili | |
CVE-2026-63160 |
critical | 9.1 | 0.0033 | 2026-10-29 | Omnispace Agora Project before 26.10.0 contains a vulnerability where the persistent remem | |
CVE-2026-63158 |
critical | 9.1 | 0.0041 | 2026-10-29 | Omnispace Agora Project before 26.10.0 contains an authentication bypass vulnerability tha | |
CVE-2026-63159 |
critical | 9.1 | 0.0033 | 2026-10-29 | Omnispace Agora Project before 26.10.0 contains a predictable password-reset token vulnera | |
CVE-2026-63149 |
critical | 9.1 | 0.0037 | 2026-10-29 | Omnispace Agora Project before 26.10.0 contains an insecure randomness vulnerability that | |
CVE-2026-63146 |
critical | 9.3 | 0.0066 | 2026-10-29 | Omnispace Agora Project before 26.10.0 contains a code injection vulnerability where unesc | |
CVE-2025-13590 |
critical | 9.1 | 0.0077 | 2026-10-29 | A malicious actor with administrative privileges can upload an arbitrary file to a user-co | |
CVE-2026-97749 |
critical | 9.8 | 0.0120 | 2026-10-29 | Double free in Microsoft Office Outlook allows an unauthorized attacker to execute code ov | |
CVE-2026-97016 |
critical | 9.8 | 0.0117 | 2026-10-29 | Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to | |
CVE-2026-96219 |
critical | 9.8 | 0.0089 | 2026-10-29 | Out-of-bounds write in Windows Local Security Authority Subsystem Service (LSASS) allows a | |
CVE-2026-96096 |
critical | 9.8 | 0.0066 | 2026-10-29 | Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to exec | |
CVE-2026-88178 |
critical | 9.8 | 0.0097 | 2026-10-29 | Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute c | |
CVE-2026-88156 |
critical | 9.8 | 0.0117 | 2026-10-29 | Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to | |
CVE-2026-88102 |
critical | 9.8 | 0.0063 | 2026-10-29 | Use after free in Windows Failover Cluster allows an unauthorized attacker to execute code | |
CVE-2026-85818 |
critical | 9.0 | 0.0041 | 2026-10-29 | Improper verification of cryptographic signature in Windows Schannel allows an unauthorize | |
CVE-2026-85814 |
critical | 9.8 | 0.0093 | 2026-10-29 | Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized at | |
CVE-2026-85809 |
critical | 9.8 | 0.0093 | 2026-10-29 | Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker | |
CVE-2026-85806 |
critical | 9.8 | 0.0091 | 2026-10-29 | Integer underflow (wrap or wraparound) in Network Policy Server (NPS) allows an unauthoriz | |
CVE-2026-85792 |
critical | 9.8 | 0.0089 | 2026-10-29 | Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker | |
CVE-2026-84015 |
critical | 9.8 | 0.0087 | 2026-10-29 | Heap-based buffer overflow in Remote Access Point-to-Point Protocol (PPP) EAP-TLS allows a | |
CVE-2026-83935 |
critical | 9.8 | 0.0090 | 2026-10-29 | Heap-based buffer overflow in Microsoft XML allows an unauthorized attacker to execute cod | |
CVE-2026-83910 |
critical | 9.8 | 0.0108 | 2026-10-29 | Out-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code over a | |
CVE-2026-83869 |
critical | 9.8 | 0.0082 | 2026-10-29 | Integer underflow (wrap or wraparound) in DNS Server allows an unauthorized attacker to ex | |
CVE-2026-83782 |
critical | 9.8 | 0.0101 | 2026-10-29 | Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute cod | |
CVE-2026-83780 |
critical | 9.8 | 0.0108 | 2026-10-29 | Use after free in Windows CCFFilter Driver allows an unauthorized attacker to execute code | |
CVE-2026-83770 |
critical | 9.8 | 0.0113 | 2026-10-29 | Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to exec | |
CVE-2026-83748 |
critical | 9.8 | 0.0093 | 2026-10-29 | Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to e | |
CVE-2026-83693 |
critical | 9.8 | 0.0113 | 2026-10-29 | Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to e | |
CVE-2026-83578 |
critical | 9.8 | 0.0109 | 2026-10-29 | Integer underflow (wrap or wraparound) in Windows PowerShell allows an unauthorized attack | |
CVE-2026-83523 |
critical | 9.8 | 0.0095 | 2026-10-29 | Heap-based buffer overflow in Windows Image Acquisition allows an unauthorized attacker to | |
CVE-2026-83519 |
critical | 9.8 | 0.0108 | 2026-10-29 | Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to e | |
CVE-2026-83517 |
critical | 9.8 | 0.0108 | 2026-10-29 | Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized at | |
CVE-2026-70300 |
critical | 9.8 | 0.0113 | 2026-10-29 | Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to | |
CVE-2026-70291 |
critical | 9.8 | 0.0133 | 2026-10-29 | Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to | |
CVE-2026-70279 |
critical | 9.3 | 0.0129 | 2026-10-29 | Improper neutralization of input during web page generation ('cross-site scripting') in Mi | |
CVE-2026-70188 |
critical | 9.1 | 0.0094 | 2026-10-29 | Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NE | |
CVE-2026-70096 |
critical | 9.8 | 0.0109 | 2026-10-29 | Heap-based buffer overflow in Windows Rich Text Edit Control allows an unauthorized attack | |
CVE-2026-70024 |
critical | 9.8 | 0.0096 | 2026-10-29 | Stack-based buffer overflow in Windows Internet Information Services allows an unauthorize | |
CVE-2026-69886 |
critical | 9.8 | 0.0095 | 2026-10-29 | Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to | |
CVE-2026-69883 |
critical | 9.8 | 0.0095 | 2026-10-29 | Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a net | |
CVE-2026-69705 |
critical | 9.8 | 0.0097 | 2026-10-29 | Out-of-bounds write in Windows iSCSI allows an unauthorized attacker to execute code over | |
CVE-2026-102238 |
critical | 9.6 | 0.0082 | 2026-10-29 | Improper limitation of a pathname to a restricted directory ('path traversal') in Visual S | |
CVE-2026-97816 |
critical | 9.8 | 0.0101 | 2026-10-29 | Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over | |
CVE-2026-97814 |
critical | 9.8 | 0.0109 | 2026-10-29 | Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to exec | |
CVE-2026-97815 |
critical | 9.8 | 0.0087 | 2026-10-29 | Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to e | |
CVE-2026-97805 |
critical | 9.8 | 0.0106 | 2026-10-29 | Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker | |
CVE-2026-96934 |
critical | 9.8 | 0.0094 | 2026-10-29 | Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over | |
CVE-2026-96924 |
critical | 9.8 | 0.0101 | 2026-10-29 | Untrusted pointer dereference in Windows OLE allows an unauthorized attacker to execute co |