Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (29164 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2024-49019 1 Microsoft 11 Windows Server 2008, Windows Server 2008 R2, Windows Server 2008 Sp2 and 8 more 2026-11-04 7.8 High
Active Directory Certificate Services Elevation of Privilege Vulnerability
CVE-2024-43598 1 Microsoft 1 Lightgbm 2026-11-04 8.1 High
LightGBM Remote Code Execution Vulnerability
CVE-2024-38200 1 Microsoft 3 365 Apps, Office, Office Long Term Servicing Channel 2026-11-04 6.5 Medium
Microsoft Office Spoofing Vulnerability
CVE-2024-38100 1 Microsoft 5 Windows Server 2016, Windows Server 2019, Windows Server 2022 and 2 more 2026-11-04 7.8 High
Windows File Explorer Elevation of Privilege Vulnerability
CVE-2024-37385 2 Microsoft, Roundcube 3 Windows, Roundcube Webmail, Webmail 2026-11-04 9.8 Critical
Roundcube Webmail before 1.5.7 and 1.6.x before 1.6.7 on Windows allows command injection via im_convert_path and im_identify_path. NOTE: this issue exists because of an incomplete fix for CVE-2020-12641.
CVE-2024-35248 1 Microsoft 3 Dynamics 365 Business Central, Dynamics 365 Business Central 2023, Dynamics 365 Business Central 2024 2026-11-03 7.3 High
Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability
CVE-2024-30104 1 Microsoft 6 365 Apps, Office, Office 2016 and 3 more 2026-11-03 7.8 High
Microsoft Office Remote Code Execution Vulnerability
CVE-2024-30103 1 Microsoft 7 365 Apps, Office, Office 2019 and 4 more 2026-11-03 8.8 High
Microsoft Outlook Remote Code Execution Vulnerability
CVE-2024-30090 1 Microsoft 23 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 20 more 2026-11-03 7 High
Microsoft Streaming Service Elevation of Privilege Vulnerability
CVE-2024-26230 1 Microsoft 23 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 20 more 2026-11-03 7.8 High
Windows Telephony Server Elevation of Privilege Vulnerability
CVE-2024-12108 2 Microsoft, Progress 2 Windows, Whatsup Gold 2026-11-03 9.6 Critical
In WhatsUp Gold versions released before 2024.0.2, an attacker can gain access to the WhatsUp Gold server via the public API.
CVE-2023-29348 1 Microsoft 7 Windows Server 2008, Windows Server 2008 R2, Windows Server 2012 and 4 more 2026-11-03 7.5 High
Windows Remote Desktop Gateway (RD Gateway) Information Disclosure Vulnerability
CVE-2023-21748 1 Microsoft 24 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 21 more 2026-11-03 7.8 High
Windows Kernel Elevation of Privilege Vulnerability
CVE-2022-35768 1 Microsoft 21 Windows 10, Windows 10 1507, Windows 10 1607 and 18 more 2026-11-03 7.8 High
Windows Kernel Elevation of Privilege Vulnerability
CVE-2022-34718 1 Microsoft 20 Windows 10, Windows 10 1507, Windows 10 1607 and 17 more 2026-11-03 9.8 Critical
Windows TCP/IP Remote Code Execution Vulnerability
CVE-2022-34707 1 Microsoft 21 Windows 10, Windows 10 1507, Windows 10 1607 and 18 more 2026-11-03 7.8 High
Windows Kernel Elevation of Privilege Vulnerability
CVE-2026-96219 1 Microsoft 20 Windows 10 1809, Windows 10 21h2, Windows 10 21h2 and 17 more 2026-11-03 9.8 Critical
Out-of-bounds write in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to execute code over a network.
CVE-2026-7363 4 Apple, Google, Linux and 1 more 4 Macos, Chrome, Linux Kernel and 1 more 2026-11-03 8.8 High
Use after free in Canvas in Google Chrome on Linux, ChromeOS prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-70075 1 Microsoft 20 Windows 10 1809, Windows 10 21h2, Windows 10 21h2 and 17 more 2026-11-03 4.4 Medium
Time-of-check time-of-use (toctou) race condition in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to bypass a security feature locally.
CVE-2026-58547 1 Microsoft 16 Windows 10 1809, Windows 10 21h2, Windows 10 21h2 and 13 more 2026-11-03 5.5 Medium
Heap-based buffer overflow in Universal Plug and Play (upnp.dll) allows an authorized attacker to elevate privileges locally.