KEV + Critical EPSS ≥ 50% Critical + PoC No Auth + Critical XSS (CWE-79) SQLi (CWE-89) Code Injection KEV + Has PoC

Filtered Results

2,956 found Export CSV
CVE Severity CVSS EPSS Published Flags Description
CVE-2026-115968 critical 9.8 0.0041 2026-10-28 Deserialization of Untrusted Data vulnerability in Ultimate Member Ultimate Member ultimate-member a
CVE-2026-103406 critical 9.8 0.0052 2026-10-28 An Improper Neutralization of Special Elements used in an OS Command vulnerability in the AutomatedP
CVE-2026-103409 critical 9.8 0.0035 2026-10-28 A Missing authentication for critical function vulnerability in Juniper Networks Session Smart Route
CVE-2026-50522 critical 9.8 0.0304 2026-07-14 KEV 5 PoC Microsoft SharePoint contains a deserialization of untrusted data vulnerability which could allow an
CVE-2026-58644 critical 9.8 0.1587 2026-07-14 KEV Microsoft SharePoint contains a deserialization of untrusted data vulnerability that allows an unaut
CVE-2026-65791 critical 9.8 0.0097 2026-08-11 Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execut
CVE-2026-42990 critical 9.8 0.0097 2026-07-14 Heap-based buffer overflow in SQL Server ODBC driver allows an unauthorized attacker to execute code
CVE-2026-49172 critical 9.8 0.0097 2026-07-14 Heap-based buffer overflow in Windows FTP Service allows an unauthorized attacker to execute code ov
CVE-2026-50447 critical 9.8 0.0097 2026-07-14 Heap-based buffer overflow in Windows Message Queuing allows an unauthorized attacker to execute cod
CVE-2026-50518 critical 9.8 0.0097 2026-07-14 Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code ov
CVE-2026-54117 critical 9.8 0.0153 2026-07-14 Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over
CVE-2026-54118 critical 9.8 0.0153 2026-07-14 Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over
CVE-2026-54990 critical 9.8 0.0082 2026-07-14 Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code
CVE-2026-56159 critical 9.8 0.0097 2026-07-14 Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code ov
CVE-2026-56188 critical 9.8 0.0061 2026-07-14 Concurrent execution using shared resource with improper synchronization ('race condition') in Windo
CVE-2026-56190 critical 9.8 0.0097 2026-07-14 2 PoC Use of uninitialized resource in Windows RDP allows an unauthorized attacker to execute code over a
CVE-2026-62815 critical 9.8 0.0097 2026-08-11 Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network.
CVE-2026-62878 critical 9.8 0.0097 2026-08-11 1 PoC Stack-based buffer overflow in Windows DNS allows an unauthorized attacker to execute code over a ne
CVE-2026-62893 critical 9.8 0.0097 2026-08-11 Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a
CVE-2026-100202 critical 9.8 0.0111 2026-10-13 Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute c
CVE-2026-100219 critical 9.8 0.0111 2026-10-13 Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network.
CVE-2026-100222 critical 9.8 0.0106 2026-10-13 Heap-based buffer overflow in Network Policy Server (NPS) allows an unauthorized attacker to execute
CVE-2026-102210 critical 9.8 0.0099 2026-10-13 Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code o
CVE-2026-70242 critical 9.8 0.0157 2026-10-13 Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute co
CVE-2026-77900 critical 9.8 0.0072 2026-10-08 Missing authentication for critical function in Azure App Service allows an unauthorized attacker to
CVE-2026-88131 critical 9.8 0.0123 2026-10-08 Deserialization of untrusted data in Microsoft Dataverse allows an unauthorized attacker to execute
CVE-2026-96113 critical 9.8 0.0087 2026-10-13 Heap-based buffer overflow in DNS Server allows an unauthorized attacker to execute code over a netw
CVE-2026-96320 critical 9.8 0.0105 2026-10-13 Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code ov
CVE-2026-96909 critical 9.8 0.0099 2026-10-13 Heap-based buffer overflow in Windows BitLocker allows an unauthorized attacker to execute code over
CVE-2026-96924 critical 9.8 0.0101 2026-10-13 Untrusted pointer dereference in Windows OLE allows an unauthorized attacker to execute code over a
CVE-2026-96934 critical 9.8 0.0094 2026-10-13 Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network
CVE-2026-97805 critical 9.8 0.0106 2026-10-13 Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute
CVE-2026-97814 critical 9.8 0.0109 2026-10-13 Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code o
CVE-2026-97815 critical 9.8 0.0087 2026-10-13 Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute cod
CVE-2026-97816 critical 9.8 0.0101 2026-10-13 Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network
CVE-2026-69705 critical 9.8 0.0097 2026-10-13 Out-of-bounds write in Windows iSCSI allows an unauthorized attacker to execute code over a network.
CVE-2026-69883 critical 9.8 0.0095 2026-10-13 Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.
CVE-2026-69886 critical 9.8 0.0095 2026-10-13 Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute c
CVE-2026-70024 critical 9.8 0.0096 2026-10-13 Stack-based buffer overflow in Windows Internet Information Services allows an unauthorized attacker
CVE-2026-70096 critical 9.8 0.0109 2026-10-13 Heap-based buffer overflow in Windows Rich Text Edit Control allows an unauthorized attacker to exec
CVE-2026-70291 critical 9.8 0.0133 2026-10-13 Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute co
CVE-2026-70300 critical 9.8 0.0113 2026-10-13 Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute co
CVE-2026-83517 critical 9.8 0.0106 2026-10-13 Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to
CVE-2026-83519 critical 9.8 0.0106 2026-10-13 Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute cod
CVE-2026-83578 critical 9.8 0.0106 2026-10-13 Integer underflow (wrap or wraparound) in Windows PowerShell allows an unauthorized attacker to exec
CVE-2026-83693 critical 9.8 0.0110 2026-10-13 Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute cod
CVE-2026-83748 critical 9.8 0.0091 2026-10-13 Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute cod
CVE-2026-83770 critical 9.8 0.0113 2026-10-13 Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code o
CVE-2026-83780 critical 9.8 0.0108 2026-10-13 Use after free in Windows CCFFilter Driver allows an unauthorized attacker to execute code over a ne
CVE-2026-83782 critical 9.8 0.0101 2026-10-13 Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a n