Export limit exceeded: 409074 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (409074 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-111383 | 2026-10-16 | 6.5 Medium | ||
| Nezha from 2.0.13 before 2.3.15 contains a resource exhaustion vulnerability that allows authenticated users to open unbounded concurrent connections to the /api/v1/ws/transfer WebSocket endpoint. Attackers can hold thousands of subscriptions created by ServerTransferClass.Subscribe without limits, exhausting file descriptors, memory, and goroutines and blocking agent gRPC reconnections. | ||||
| CVE-2026-110450 | 1 Nixos | 1 Nix | 2026-10-16 | 8 High |
| Nix before 2.35.3 and Lix before 2.95.4 allow privilege escalation via a repair operation because it could destroy and then replace a store path before content verification. | ||||
| CVE-2026-110453 | 1 Nixos | 1 Nix | 2026-10-16 | 4.3 Medium |
| Nix before 2.35.3, when unsandboxed on macOS or FreeBSD, incorrectly allows connections made by build users from daemon clients. | ||||
| CVE-2026-106931 | 2026-10-16 | N/A | ||
| SiteGuard Server Edition contains an OS command injection vulnerability, which may allow an attacker to execute arbitrary OS commands with root or SYSTEM privileges on the system running the affected product. | ||||
| CVE-2026-110454 | 2026-10-16 | 5.3 Medium | ||
| A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to access internal resources through the device. | ||||
| CVE-2026-110456 | 2026-10-16 | 5.3 Medium | ||
| A malicious actor with access to the network and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to access internal resources through the device. | ||||
| CVE-2026-110457 | 2026-10-16 | 3.7 Low | ||
| A malicious actor with access to the network and under certain conditions could exploit a Path Traversal vulnerability found in UniFi Protect AI Key to obtain information about files on the device. | ||||
| CVE-2026-108426 | 1 Microsoft | 3 365 Apps, Office 2021, Office 2024 | 2026-10-16 | 8.8 High |
| Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-108427 | 1 Microsoft | 3 365 Apps, Office 2021, Office 2024 | 2026-10-16 | 8.8 High |
| Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-108428 | 1 Microsoft | 3 365 Apps, Office 2021, Office 2024 | 2026-10-16 | 8.8 High |
| Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-108429 | 1 Microsoft | 3 365 Apps, Office 2021, Office 2024 | 2026-10-16 | 8.8 High |
| Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-108430 | 1 Microsoft | 6 365 Apps, Office 2021, Office 2024 and 3 more | 2026-10-16 | 8.8 High |
| Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-108431 | 1 Microsoft | 6 365 Apps, Office 2021, Office 2024 and 3 more | 2026-10-16 | 8.8 High |
| Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-108432 | 1 Microsoft | 6 365 Apps, Office 2021, Office 2024 and 3 more | 2026-10-16 | 8.8 High |
| Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-108433 | 1 Microsoft | 6 365 Apps, Office 2021, Office 2024 and 3 more | 2026-10-16 | 7.8 High |
| Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally. | ||||
| CVE-2026-108434 | 1 Microsoft | 6 365 Apps, Office 2021, Office 2024 and 3 more | 2026-10-16 | 6.5 Medium |
| Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. | ||||
| CVE-2026-108435 | 1 Microsoft | 6 365 Apps, Office 2021, Office 2024 and 3 more | 2026-10-16 | 6.5 Medium |
| Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. | ||||
| CVE-2026-108436 | 1 Microsoft | 6 365 Apps, Office 2021, Office 2024 and 3 more | 2026-10-16 | 6.5 Medium |
| Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. | ||||
| CVE-2026-108437 | 1 Microsoft | 3 365 Apps, Office 2021, Office 2024 | 2026-10-16 | 8.8 High |
| Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-108438 | 1 Microsoft | 4 365 Apps, Office 365, Office Macos 2021 and 1 more | 2026-10-16 | 6.5 Medium |
| Use after free in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. | ||||