Browse All CVEs
3,393 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-50518 |
critical | 9.8 | 0.0097 | 2026-10-29 | Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execu | |
CVE-2026-50447 |
critical | 9.8 | 0.0097 | 2026-10-29 | Heap-based buffer overflow in Windows Message Queuing allows an unauthorized attacker to e | |
CVE-2026-50380 |
critical | 9.6 | 0.0082 | 2026-10-29 | Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code | |
CVE-2026-49798 |
critical | 9.3 | 0.0036 | 2026-10-29 | Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges loc | |
CVE-2026-49172 |
critical | 9.8 | 0.0097 | 2026-10-29 | Heap-based buffer overflow in Windows FTP Service allows an unauthorized attacker to execu | |
CVE-2026-48561 |
critical | 9.6 | 0.0086 | 2026-10-29 | Improper neutralization of special elements used in a command ('command injection') in Cop | |
CVE-2026-42990 |
critical | 9.8 | 0.0097 | 2026-10-29 | Heap-based buffer overflow in SQL Server ODBC driver allows an unauthorized attacker to ex | |
CVE-2026-70306 |
critical | 9.3 | 0.0101 | 2026-10-29 | Improper neutralization of input during web page generation ('cross-site scripting') in Mi | |
CVE-2026-69555 |
critical | 10.0 | 0.0080 | 2026-10-29 | Incorrect authorization in Azure Arc allows an unauthorized attacker to elevate privileges | |
CVE-2026-69502 |
critical | 10.0 | 0.0080 | 2026-10-29 | Server-side request forgery (ssrf) in Azure SQL Database allows an unauthorized attacker t | |
CVE-2026-69400 |
critical | 9.6 | 0.0094 | 2026-10-29 | Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Lo | |
CVE-2026-68782 |
critical | 9.9 | 0.0099 | 2026-10-29 | Improper neutralization of special elements used in an sql command ('sql injection') in Az | |
CVE-2026-66309 |
critical | 9.1 | 0.0086 | 2026-10-29 | Improper access control in Azure SQL Database allows an authorized attacker to elevate pri | |
CVE-2026-65816 |
critical | 10.0 | 0.0097 | 2026-10-29 | Use of incorrectly-resolved name or reference in Azure Arc allows an unauthorized attacker | |
CVE-2026-65791 |
critical | 9.8 | 0.0097 | 2026-10-29 | Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker | |
CVE-2026-65770 |
critical | 10.0 | 0.0105 | 2026-10-29 | Improper neutralization of argument delimiters in a command ('argument injection') in Azur | |
CVE-2026-63509 |
critical | 9.9 | 0.0102 | 2026-10-29 | Relative path traversal in Microsoft Fabric allows an authorized attacker to elevate privi | |
CVE-2026-103594 |
critical | 9.5 | 0.0043 | 2026-10-29 | A stack-based buffer overflow vulnerability in Fireware OS's WireGuard configuration proce | |
CVE-2026-112709 |
critical | 9.2 | 0.0042 | 2026-10-29 | A heap-based buffer overflow vulnerability in the Fireware OS authentication service allow | |
CVE-2026-112710 |
critical | 9.2 | 0.0042 | 2026-10-29 | A heap-based buffer overflow vulnerability exists in the Fireware OS authentication servic | |
CVE-2026-116863 |
critical | 9.6 | 0.0018 | 2026-10-29 | Cross-Site Request Forgery (CSRF) vulnerability in Tribulant Software Newsletters newslett | |
CVE-2026-90465 |
critical | 9.4 | 0.0024 | 2026-10-29 | A missing authentication vulnerability in the FireCluster Sync processing allows an attack | |
CVE-2026-93857 |
critical | 9.2 | 0.0047 | 2026-10-29 | A stack-based buffer overflow vulnerability in Fireware OS's SIP proxy allows a remote, un | |
CVE-2026-93865 |
critical | 9.2 | 0.0046 | 2026-10-29 | A missing authentication vulnerability in the Fireware OS FireCluster synchronization daem | |
CVE-2026-93866 |
critical | 9.2 | 0.0045 | 2026-10-29 | An integer overflow vulnerability in the WebSocket connection handling used by WatchGuard | |
CVE-2026-104350 |
critical | 9.3 | 0.0060 | 2026-10-29 | Adobe Campaign Classic (ACC) is affected by a reflected Cross-Site Scripting (XSS) vulnera | |
CVE-2026-104351 |
critical | 9.9 | 0.0057 | 2026-10-29 | Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Co | |
CVE-2026-104353 |
critical | 9.9 | 0.0130 | 2026-10-29 | Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements | |
CVE-2026-104354 |
critical | 9.1 | 0.0050 | 2026-10-29 | Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements | |
CVE-2026-105489 |
critical | 9.9 | 0.0048 | 2026-10-29 | Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements | |
CVE-2026-105779 |
critical | 9.1 | 0.0029 | 2026-10-29 | Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements | |
CVE-2026-105780 |
critical | 9.9 | 0.0049 | 2026-10-29 | Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that | |
CVE-2026-105781 |
critical | 10.0 | 0.0052 | 2026-10-29 | Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements | |
CVE-2026-106076 |
critical | 9.0 | 0.0037 | 2026-10-29 | A vulnerability allowing an authenticated organization-transfer peer to inject SQL into th | |
CVE-2026-108014 |
critical | 9.1 | 0.0013 | 2026-10-29 | Private keys for eight eMudhra intermediate CA certificates have been compromised https:/ | |
CVE-2026-108015 |
critical | 9.1 | 0.0013 | 2026-10-29 | Private keys for eight eMudhra intermediate CA certificates have been compromised https:/ | |
CVE-2026-108142 |
critical | 9.1 | 0.0040 | 2026-10-29 | A vulnerability allowing an unauthenticated attacker to bypass authorization on the CDP Co | |
CVE-2026-114595 |
critical | 9.3 | 0.0050 | 2026-10-29 | In EPICS Base release 7.0.10 and prior, an integer overflow in network request processing | |
CVE-2026-48360 |
critical | 9.6 | 0.0045 | 2026-10-29 | Adobe Connect is affected by an Improper Control of Generation of Code ('Code Injection') | |
CVE-2026-112352 |
critical | 9.1 | 0.0132 | 2026-10-29 | Sunhillo SureLine before 9.1.5 contains an authentication bypass vulnerability that allows | |
CVE-2026-116692 |
critical | 9.8 | 0.0070 | 2026-10-29 | MLflow is an open source AI engineering platform for agents, large language models, and ma | |
CVE-2026-118305 |
critical | 9.6 | 0.0033 | 2026-10-29 | Memory corruption in Turbolev in Google Chrome prior to 156.0.8078.73 allowed a remote att | |
CVE-2026-118306 |
critical | 9.6 | 0.0033 | 2026-10-29 | Memory corruption in FileSystem in Google Chrome prior to 156.0.8078.73 allowed a remote a | |
CVE-2026-118308 |
critical | 9.6 | 0.0027 | 2026-10-29 | Use after free in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to | |
CVE-2026-118309 |
critical | 9.6 | 0.0027 | 2026-10-29 | Improper input validation in UI in Google Chrome on on Android prior to 156.0.8078.73 allo | |
CVE-2026-118310 |
critical | 9.6 | 0.0027 | 2026-10-29 | Improper input validation in Views in Google Chrome on on Windows prior to 156.0.8078.73 a | |
CVE-2026-118312 |
critical | 9.6 | 0.0027 | 2026-10-29 | Memory corruption in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote attack | |
CVE-2026-118316 |
critical | 9.6 | 0.0027 | 2026-10-29 | Improper input validation in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote a | |
CVE-2026-118321 |
critical | 9.6 | 0.0033 | 2026-10-29 | Improper input validation in Core in Google Chrome on on Android prior to 156.0.8078.73 al | |
CVE-2026-118332 |
critical | 9.6 | 0.0027 | 2026-10-29 | Improper input validation in Compositing in Google Chrome prior to 156.0.8078.73 allowed a |