Export limit exceeded: 389567 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Expected end of text, found ':' (at char 28), (line:1, col:29)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (389567 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-69778 1 Microsoft 7 365 Apps, Access 2016, Microsoft Access 2016 (32-bit Edition) and 4 more 2026-09-09 8.8 High
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
CVE-2026-79963 1 Dell 1 Secure Connect Gateway 2026-09-09 7.4 High
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Download of Code Without Integrity Check vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to command execution.
CVE-2026-78519 1 Microsoft 6 365 Apps, Office 2019, Office 2021 and 3 more 2026-09-09 8.8 High
Use of uninitialized resource in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-79970 1 Dell 1 Secure Connect Gateway 2026-09-09 5.6 Medium
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Verification of Cryptographic Signature vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to protection mechanism bypass.
CVE-2026-79972 1 Dell 1 Secure Connect Gateway 2026-09-09 7.2 High
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access.
CVE-2026-80171 1 Dell 1 Secure Connect Gateway 2026-09-09 4.7 Medium
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Insufficient Entropy in PRNG vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to elevation of privileges.
CVE-2026-78520 1 Microsoft 10 365 Apps, Microsoft 365, Office 2019 and 7 more 2026-09-09 6.5 Medium
Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-80073 1 Microsoft 6 365 Apps, Office 2019, Office 2021 and 3 more 2026-09-09 6.5 Medium
Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network.
CVE-2026-80076 1 Microsoft 8 365 Apps, Microsoft 365, Office 2019 and 5 more 2026-09-09 6.5 Medium
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.
CVE-2026-80078 1 Microsoft 8 365 Apps, Microsoft 365, Office 2019 and 5 more 2026-09-09 6.5 Medium
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.
CVE-2026-81168 2 Captcha Protected Page Project, Drupal 2 Captcha Protected Page, Captcha Protected Page 2026-09-09 3.7 Low
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal CAPTCHA Protected Page allows Functionality Bypass. This issue affects CAPTCHA Protected Page versions: from 0.0.0 to 1.0.2.
CVE-2026-78513 1 Microsoft 10 365 Apps, Microsoft 365, Office 2019 and 7 more 2026-09-09 5.5 Medium
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.
CVE-2026-78524 1 Microsoft 9 365 Apps, Microsoft 365, Office 2016 and 6 more 2026-09-09 8.8 High
Out-of-bounds write in Microsoft Office allows an unauthorized attacker to execute code over a network.
CVE-2026-81167 2 Address Suggestion Project, Drupal 2 Address Suggestion, Address Suggestion 2026-09-09 4.8 Medium
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Address Suggestion allows Cross-Site Scripting (XSS). This issue affects Address Suggestion versions: from 0.0.0 to 1.0.25.
CVE-2026-72977 1 Microsoft 10 365 Apps, Microsoft 365, Office 2019 and 7 more 2026-09-09 6.5 Medium
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
CVE-2026-81162 2 Drupal, Dxpr Builder Project 2 Dxpr Builder: The Best Editing (ai) Experience For Drupal, Dxpr Builder 2026-09-09 5.3 Medium
Insertion of Sensitive Information Into Sent Data vulnerability in Drupal DXPR Builder: The Best Editing (AI) Experience for Drupal allows Forceful Browsing. This issue affects DXPR Builder: The Best Editing (AI) Experience for Drupal versions: from 0.0.0 to 2.8.1.
CVE-2026-72938 1 Microsoft 8 365 Apps, Microsoft 365, Office 2019 and 5 more 2026-09-09 6.5 Medium
Access of resource using incompatible type ('type confusion') in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
CVE-2026-69857 1 Microsoft 2 Azure Cosmos Db, Cosmos Db 2026-09-09 8.5 High
Authorization bypass through user-controlled key in Azure Cosmos DB allows an authorized attacker to perform spoofing over a network.
CVE-2026-87518 2 Apple, Google 2 Iphone Os, Chrome 2026-09-09 5.3 Medium
Observable discrepancy in Safebrowsing in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87530 2 Google, Microsoft 2 Chrome, Windows 2026-09-09 8.1 High
Uncontrolled search path element in CredentialProvider in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. (Chromium security severity: Medium)