Export limit exceeded: 27557 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Search Results (27557 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-87494 2 Google, Microsoft 2 Chrome, Windows 2026-09-09 9.6 Critical
Use after free in Browser in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87457 2 Google, Microsoft 2 Chrome, Windows 2026-09-09 8.1 High
Race condition in Updater in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. (Chromium security severity: Medium)
CVE-2026-87616 2 Google, Microsoft 2 Chrome, Windows 2026-09-09 8.3 High
Improper initialization in Views in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87618 2 Google, Microsoft 2 Chrome, Windows 2026-09-09 8.3 High
Incorrect reference resolution in Storage in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-69417 1 Microsoft 1 Sharepoint Server 2026-09-09 7.3 High
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-77897 1 Microsoft 2 Power Automate Agent For Virtual Desktops, Power Automate For Desktop 2026-09-09 7 High
Relative path traversal in Power Automate allows an authorized attacker to elevate privileges locally.
CVE-2026-69478 1 Microsoft 18 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 15 more 2026-09-09 7.8 High
Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
CVE-2026-65772 1 Microsoft 1 Dynamics 365 2026-09-09 8.8 High
Deserialization of untrusted data in Microsoft Dynamics 365 allows an authorized attacker to execute code over a network.
CVE-2026-58599 1 Microsoft 3 Hevc Video Extensions, Hevc Video Extensions For Licensed Appplications, Hevc Video Extensions From Device Manufacturer 2026-09-09 7.8 High
Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally.
CVE-2026-87454 2 Google, Microsoft 2 Chrome, Windows 2026-09-09 6.5 Medium
Information leak in Enterprise in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-0294 4 Apple, Microsoft, Palo Alto Networks and 1 more 4 Macos, Windows, Prisma Access Agent and 1 more 2026-09-09 7.8 High
A privilege escalation (PE) vulnerability in the Palo Alto Networks Prisma® Access Agent app on Windows and macOS devices enables a local user to execute code with elevated privileges. The Prisma Access Agent on Linux, iOS, Android, and ChromeOS is not affected.
CVE-2026-0293 3 Microsoft, Palo Alto Networks, Paloaltonetworks 3 Windows, Prisma Access Agent, Prisma Access Agent 2026-09-09 6.0 Medium
A vulnerability in Palo Alto Networks Prisma® Access Agent on Windows enables a local attacker with administrator privileges to bypass the anti-tamper protection, enabling unauthorized access to protected processes and files. The Prisma Access Agent on Linux, macOS, iOS, Android, and Chrome OS is not affected.
CVE-2026-0292 3 Microsoft, Palo Alto Networks, Paloaltonetworks 3 Windows, Prisma Access Agent, Prisma Access Agent 2026-09-09 6.0 Medium
An authentication bypass vulnerability in the network driver of Palo Alto Networks Prisma® Access Agent on Windows enables a local administrator to bypass security inspection, subsequently allowing them to inject and intercept arbitrary network traffic. The Prisma Access Agent on Linux, macOS, iOS, Android, and Chrome OS is not affected.
CVE-2026-77104 3 Commvault, Linux, Microsoft 3 Commvault, Linux Kernel, Windows 2026-09-09 7.5 High
CommServe contained a path traversal issue affecting information disclosure. Software customers upgrade to resolved maintenance release. Update CommServe.
CVE-2026-77103 3 Commvault, Linux, Microsoft 3 Commvault, Linux Kernel, Windows 2026-09-09 7.5 High
CommServe contained an authentication bypass issue affecting access authorization and information disclosure. Software customers upgrade to resolved maintenance release. Update CommServe.
CVE-2026-77102 3 Commvault, Linux, Microsoft 3 Commvault, Linux Kernel, Windows 2026-09-09 7.5 High
CommServe contained a heap-based buffer overflow issue affecting service availability. Software customers upgrade to resolved maintenance release. Update CommServe.
CVE-2026-77101 3 Commvault, Linux, Microsoft 3 Commvault, Linux Kernel, Windows 2026-09-09 7.5 High
CommServe contained a stack-based buffer overflow issue affecting service availability. Software customers upgrade to resolved maintenance release. Update CommServe.
CVE-2026-77105 3 Commvault, Linux, Microsoft 3 Commvault, Linux Kernel, Windows 2026-09-09 8.8 High
CommServe contained a cryptographic signature verification issue affecting privilege management. Software customers upgrade to resolved maintenance release. Update CommServe and Web Server.
CVE-2026-81397 1 Microsoft 11 365 Apps, Excel, Excel 2016 and 8 more 2026-09-09 7.8 High
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-81398 1 Microsoft 11 365 Apps, Excel, Excel 2016 and 8 more 2026-09-09 7.8 High
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.