Critical CVEs
3,393 CVEs with CVSS 9.0+ severity, ranked by exploitation probability.
| CVE | CVSS | EPSS | Percentile | Published | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-112393 |
9.2 |
0.0102
|
63.3% | 2026-10-19 | Pillow is a Python imaging library. From 2.0.0 until 13.0.0, Pillow has a heap buffer over | |
CVE-2026-14522 |
9.8 |
0.0102
|
63.2% | 2026-07-30 | IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 coul | |
CVE-2026-112346 |
9.3 |
0.0101
|
63.2% | 2026-10-26 | OpenHands Software Agent SDK before 1.52.0 contains an unauthenticated remote code executi | |
CVE-2026-19264 |
9.3 |
0.0101
|
63.1% | 2026-08-07 | Postiz is an open-source social media scheduling tool. The route that serves locally store | |
CVE-2026-63732 |
9.4 |
0.0101
|
63.1% | 2026-07-23 | 9router 0.4.59 (fixed in 0.4.60) contains a chain of vulnerabilities: a hardcoded default | |
CVE-2026-83782 |
9.8 |
0.0101
|
63.1% | 2026-10-13 | Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute cod | |
CVE-2026-69256 |
9.4 |
0.0101
|
63.1% | 2026-08-04 | Flowise is a drag & drop user interface to build a customized large language model flow. P | |
CVE-2026-96924 |
9.8 |
0.0101
|
63.0% | 2026-10-13 | Untrusted pointer dereference in Windows OLE allows an unauthorized attacker to execute co | |
CVE-2026-97816 |
9.8 |
0.0101
|
63.0% | 2026-10-13 | Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over | |
CVE-2026-70306 |
9.3 |
0.0101
|
63.0% | 2026-08-11 | Improper neutralization of input during web page generation ('cross-site scripting') in Mi | |
CVE-2026-20093 |
9.8 |
0.0101
|
63.0% | 2026-04-01 | A vulnerability in the change password functionality of Cisco Integrated Management Contro | |
CVE-2026-5426 |
9.1 |
0.0101
|
63.0% | 2026-04-16 | Hard-coded ASP.NET/IIS machineKey value in Digital Knowledge KnowledgeDeliver deployments | |
CVE-2026-4149 |
9.8 |
0.0100
|
62.6% | 2026-04-11 | Sonos Era 300 SMB Response Out-Of-Bounds Access Remote Code Execution Vulnerability. This | |
CVE-2026-9862 |
9.8 |
0.0099
|
62.5% | 2026-06-15 | Fortra's Core Privileged Access Manager (BoKS) contains an OS command injection vulnerabi | |
CVE-2026-71558 |
9.8 |
0.0099
|
62.5% | 2026-08-07 | Heap type confusion vulnerability in Apache Fory C++ deserialization. This issue affects | |
CVE-2026-115893 |
9.9 |
0.0099
|
62.4% | 2026-10-23 | 1 PoC | Wasmtime is a runtime for WebAssembly. Prior to 36.0.19, 48.0.7, and 49.0.4, the Cranelift |
CVE-2026-105010 |
9.8 |
0.0099
|
62.4% | 2026-10-13 | Use after free in Microsoft Windows Search Component allows an unauthorized attacker to el | |
CVE-2026-102210 |
9.8 |
0.0099
|
62.4% | 2026-10-13 | Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to exec | |
CVE-2026-96909 |
9.8 |
0.0099
|
62.4% | 2026-10-13 | Heap-based buffer overflow in Windows BitLocker allows an unauthorized attacker to execute | |
CVE-2026-33844 |
9.0 |
0.0099
|
62.4% | 2026-05-07 | Improper access control in Azure Managed Instance for Apache Cassandra allows an authorize | |
CVE-2026-68782 |
9.9 |
0.0099
|
62.4% | 2026-08-20 | Improper neutralization of special elements used in an sql command ('sql injection') in Az | |
CVE-2026-68789 |
9.9 |
0.0099
|
62.4% | 2026-08-20 | Improper neutralization of special elements used in an sql command ('sql injection') in Az | |
CVE-2026-1555 |
9.8 |
0.0098
|
62.2% | 2026-04-15 | The WebStack theme for WordPress is vulnerable to arbitrary file uploads due to missing fi | |
CVE-2026-55971 |
9.3 |
0.0098
|
62.1% | 2026-07-27 | Heap-based Buffer Overflow vulnerability in Apache Thrift C++ bindings. This issue affect | |
CVE-2026-47140 |
10.0 |
0.0098
|
62.1% | 2026-06-12 | vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, NodeVM blocks sever | |
CVE-2023-29531 |
9.8 |
0.0097
|
62.0% | 2023-06-19 | An attacker could have caused an out of bounds memory access using WebGL APIs, leading to | |
CVE-2026-55010 |
9.8 |
0.0097
|
62.0% | 2026-07-14 | Heap-based buffer overflow in Minecraft Bedrock Dedicated Server allows an unauthorized at | |
CVE-2026-8476 |
9.9 |
0.0097
|
62.0% | 2026-07-17 | IBM Langflow OSS 1.0.0 through 1.10.0 contain a critical remote code execution vulnerabili | |
CVE-2026-56165 |
9.8 |
0.0097
|
62.0% | 2026-07-23 | Heap-based buffer overflow in Microsoft Account allows an unauthorized attacker to execute | |
CVE-2026-65791 |
9.8 |
0.0097
|
62.0% | 2026-08-11 | Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker | |
CVE-2026-65816 |
10.0 |
0.0097
|
62.0% | 2026-08-20 | Use of incorrectly-resolved name or reference in Azure Arc allows an unauthorized attacker | |
CVE-2026-42990 |
9.8 |
0.0097
|
62.0% | 2026-07-14 | Heap-based buffer overflow in SQL Server ODBC driver allows an unauthorized attacker to ex | |
CVE-2026-49172 |
9.8 |
0.0097
|
62.0% | 2026-07-14 | Heap-based buffer overflow in Windows FTP Service allows an unauthorized attacker to execu | |
CVE-2026-50447 |
9.8 |
0.0097
|
62.0% | 2026-07-14 | Heap-based buffer overflow in Windows Message Queuing allows an unauthorized attacker to e | |
CVE-2026-50518 |
9.8 |
0.0097
|
62.0% | 2026-07-14 | Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execu | |
CVE-2026-56159 |
9.8 |
0.0097
|
62.0% | 2026-07-14 | Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execu | |
CVE-2026-56190 |
9.8 |
0.0097
|
62.0% | 2026-07-14 | 1 PoC | Use of uninitialized resource in Windows RDP allows an unauthorized attacker to execute co |
CVE-2026-62815 |
9.8 |
0.0097
|
62.0% | 2026-08-11 | Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a ne | |
CVE-2026-62878 |
9.8 |
0.0097
|
62.0% | 2026-08-11 | 1 PoC | Stack-based buffer overflow in Windows DNS allows an unauthorized attacker to execute code |
CVE-2026-62893 |
9.8 |
0.0097
|
62.0% | 2026-08-11 | Use after free in Windows Deployment Services allows an unauthorized attacker to execute c | |
CVE-2026-67631 |
9.8 |
0.0097
|
62.0% | 2026-09-08 | Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code o | |
CVE-2026-66302 |
9.8 |
0.0097
|
62.0% | 2026-09-08 | External control of file name or path in Skype for Business allows an unauthorized attacke | |
CVE-2026-62835 |
9.3 |
0.0097
|
61.9% | 2026-07-24 | Improper authorization in Azure Portal allows an unauthorized attacker to disclose informa | |
CVE-2026-68502 |
9.8 |
0.0097
|
61.9% | 2026-07-30 | LazyOwn RedTeam/APT Framework is an AI-powered C2 and red-team operations framework. Prior | |
CVE-2026-0625 |
9.3 |
0.0097
|
61.9% | 2026-01-05 | Multiple D-Link DSL/DIR/DNS devices contain an authentication bypass and improper access c | |
CVE-2026-48326 |
9.9 |
0.0097
|
61.9% | 2026-08-03 | Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements | |
CVE-2026-70470 |
9.5 |
0.0097
|
61.9% | 2026-08-04 | Flowise is a drag & drop user interface to build a customized large language model flow. P | |
CVE-2026-88178 |
9.8 |
0.0097
|
61.9% | 2026-10-13 | Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute c | |
CVE-2026-42238 |
9.0 |
0.0097
|
61.8% | 2026-05-04 | Nginx UI is a web user interface for the Nginx web server. Prior to version 2.3.8, nginx-u | |
CVE-2026-47698 |
9.8 |
0.0097
|
61.8% | 2026-08-17 | vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.6, lib/bridge.js and lib/setup |