Browse All CVEs
9,222 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-63169 |
medium | 5.3 | 0.0029 | 2026-10-29 | Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerabilit | |
CVE-2026-63171 |
medium | 5.1 | 0.0022 | 2026-10-29 | Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerabilit | |
CVE-2026-63168 |
medium | 5.1 | 0.0028 | 2026-10-29 | Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerabilit | |
CVE-2026-63157 |
medium | 5.1 | 0.0022 | 2026-10-29 | Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerabilit | |
CVE-2026-63156 |
medium | 5.1 | 0.0030 | 2026-10-29 | Omnispace Agora Project before 26.10.0 contains a reflected cross-site scripting vulnerabi | |
CVE-2026-63147 |
medium | 5.1 | 0.0021 | 2026-10-29 | Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerabilit | |
CVE-2026-63148 |
medium | 5.1 | 0.0018 | 2026-10-29 | Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerabilit | |
CVE-2026-56101 |
medium | 6.0 | 0.0060 | 2026-10-29 | OpenBSD before commit 1ee99df contains an inverted comparison vulnerability in the ieee802 | |
CVE-2026-112328 |
medium | 5.3 | 0.0016 | 2026-10-29 | The Sensei LMS WordPress plugin before 4.26.4 contains a broken access control vulnerabili | |
CVE-2026-97782 |
medium | 6.8 | 0.0053 | 2026-10-29 | Observable discrepancy in Microsoft Office SharePoint allows an authorized attacker to per | |
CVE-2026-97744 |
medium | 5.5 | 0.0046 | 2026-10-29 | Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to discl | |
CVE-2026-97740 |
medium | 6.5 | 0.0086 | 2026-10-29 | Exposure of sensitive system information to an unauthorized control sphere in Microsoft Of | |
CVE-2026-97014 |
medium | 5.5 | 0.0050 | 2026-10-29 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose i | |
CVE-2026-97005 |
medium | 5.5 | 0.0035 | 2026-10-29 | Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to discl | |
CVE-2026-96935 |
medium | 5.5 | 0.0035 | 2026-10-29 | Exposure of sensitive system information to an unauthorized control sphere in Windows NTFS | |
CVE-2026-96921 |
medium | 5.5 | 0.0039 | 2026-10-29 | Access of resource using incompatible type ('type confusion') in Windows Message Queuing Q | |
CVE-2026-96857 |
medium | 5.5 | 0.0038 | 2026-10-29 | Files or directories accessible to external parties in Windows Projected File System allow | |
CVE-2026-96851 |
medium | 5.5 | 0.0039 | 2026-10-29 | Buffer over-read in Windows Management Instrumentation allows an authorized attacker to di | |
CVE-2026-96855 |
medium | 5.5 | 0.0028 | 2026-10-29 | Improper access control in Windows Modern Device Management (MDM) allows an authorized att | |
CVE-2026-96849 |
medium | 5.5 | 0.0039 | 2026-10-29 | Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker | |
CVE-2026-96848 |
medium | 5.5 | 0.0039 | 2026-10-29 | Buffer over-read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclo | |
CVE-2026-96315 |
medium | 5.5 | 0.0028 | 2026-10-29 | Missing authorization in Windows Overlay Filter allows an authorized attacker to perform t | |
CVE-2026-96316 |
medium | 5.5 | 0.0028 | 2026-10-29 | Improper access control in Windows Routing and Remote Access Service (RRAS) allows an auth | |
CVE-2026-96314 |
medium | 5.5 | 0.0039 | 2026-10-29 | Out-of-bounds read in Windows Audio Service allows an authorized attacker to disclose info | |
CVE-2026-96311 |
medium | 5.5 | 0.0028 | 2026-10-29 | Improper authorization in Windows Network List Service allows an authorized attacker to pe | |
CVE-2026-96247 |
medium | 5.5 | 0.0039 | 2026-10-29 | Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker | |
CVE-2026-96218 |
medium | 5.5 | 0.0055 | 2026-10-29 | Improper access control in Windows Update Stack allows an authorized attacker to perform t | |
CVE-2026-96204 |
medium | 6.5 | 0.0078 | 2026-10-29 | Server-side request forgery (ssrf) in Azure Arc allows an authorized attacker to elevate p | |
CVE-2026-96183 |
medium | 5.5 | 0.0038 | 2026-10-29 | Missing authentication for critical function in Windows Health and Optimized Experiences S | |
CVE-2026-95904 |
medium | 5.5 | 0.0030 | 2026-10-29 | Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclos | |
CVE-2026-94506 |
medium | 6.5 | 0.0095 | 2026-10-29 | Out-of-bounds read in Microsoft Office Access allows an unauthorized attacker to disclose | |
CVE-2026-88208 |
medium | 4.6 | 0.0027 | 2026-10-29 | Improper neutralization of input during web page generation ('cross-site scripting') in Mi | |
CVE-2026-88209 |
medium | 4.6 | 0.0036 | 2026-10-29 | Improper neutralization of input during web page generation ('cross-site scripting') in Mi | |
CVE-2026-88201 |
medium | 6.5 | 0.0063 | 2026-10-29 | Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose inf | |
CVE-2026-88175 |
medium | 6.5 | 0.0084 | 2026-10-29 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose i | |
CVE-2026-88169 |
medium | 6.5 | 0.0084 | 2026-10-29 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose in | |
CVE-2026-88167 |
medium | 6.5 | 0.0086 | 2026-10-29 | Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose info | |
CVE-2026-88162 |
medium | 5.5 | 0.0028 | 2026-10-29 | Improper authorization in Windows Encrypting File System (EFS) allows an authorized attack | |
CVE-2026-88158 |
medium | 5.5 | 0.0029 | 2026-10-29 | Out-of-bounds read in Microsoft Digest Authentication allows an authorized attacker to dis | |
CVE-2026-88153 |
medium | 6.5 | 0.0083 | 2026-10-29 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose i | |
CVE-2026-88151 |
medium | 6.5 | 0.0083 | 2026-10-29 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose i | |
CVE-2026-88137 |
medium | 6.5 | 0.0095 | 2026-10-29 | Files or directories accessible to external parties in WebDAV allows an authorized attacke | |
CVE-2026-88132 |
medium | 5.9 | 0.0032 | 2026-10-29 | Origin validation error in Azure Key Vault allows an unauthorized attacker to disclose inf | |
CVE-2026-88099 |
medium | 5.9 | 0.0082 | 2026-10-29 | Uncaught exception in Windows Failover Cluster allows an unauthorized attacker to deny ser | |
CVE-2026-87714 |
medium | 6.5 | 0.0045 | 2026-10-29 | Missing authorization in WebDAV allows an authorized attacker to bypass a security feature | |
CVE-2026-85916 |
medium | 6.2 | 0.0043 | 2026-10-29 | Exposure of private personal information to an unauthorized actor in Azure Active Director | |
CVE-2026-85873 |
medium | 6.5 | 0.0096 | 2026-10-29 | Improper authorization in Skype for Business and Microsoft Lync allows an authorized attac | |
CVE-2026-85865 |
medium | 5.5 | 0.0029 | 2026-10-29 | Improper authentication in Windows DHCP Server allows an authorized attacker to bypass a s | |
CVE-2026-85859 |
medium | 6.5 | 0.0079 | 2026-10-29 | Null pointer dereference in Windows Message Queuing Queue Manager allows an authorized att | |
CVE-2026-85857 |
medium | 5.5 | 0.0047 | 2026-10-29 | Insertion of sensitive information into log file in Windows Kernel-Mode Drivers allows an |