Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (522 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-65816 1 Microsoft 1 Azure Web Apps 2026-08-24 10 Critical
Use of incorrectly-resolved name or reference in Azure Arc allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-69400 1 Microsoft 1 Azure Logic Apps 2026-08-24 9.6 Critical
Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-68789 1 Microsoft 1 Azure Sql Database 2026-08-24 9.9 Critical
Improper neutralization of special elements used in an sql command ('sql injection') in Azure SQL Database allows an authorized attacker to elevate privileges over a network.
CVE-2026-68782 1 Microsoft 1 Azure Sql Database 2026-08-24 9.9 Critical
Improper neutralization of special elements used in an sql command ('sql injection') in Azure SQL Database allows an authorized attacker to elevate privileges over a network.
CVE-2026-66309 1 Microsoft 1 Azure Sql Database 2026-08-24 9.1 Critical
Improper access control in Azure SQL Database allows an authorized attacker to elevate privileges over a network.
CVE-2026-66800 1 Microsoft 1 Azure Data Factory 2026-08-24 8.6 High
Server-side request forgery (ssrf) in Azure Data Factory allows an unauthorized attacker to disclose information over a network.
CVE-2026-62834 1 Microsoft 1 Azure Data Factory 2026-08-24 9.3 Critical
Improper verification of cryptographic signature in Azure Data Factory allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-48567 1 Microsoft 2 .azure Horizondb, Azure Horizondb 2026-08-24 10 Critical
Authentication bypass by spoofing in Azure HorizonDB allows an unauthorized attacker to elevate privileges over a network.
CVE-2021-27080 1 Microsoft 1 Azure Sphere 2026-08-19 9.3 Critical
Azure Sphere Unsigned Code Execution Vulnerability
CVE-2021-27075 1 Microsoft 6 Azure Container Instance, Azure Container Instances, Azure Container Registry and 3 more 2026-08-19 6.8 Medium
Azure Virtual Machine Information Disclosure Vulnerability
CVE-2021-27074 1 Microsoft 1 Azure Sphere 2026-08-19 6.2 Medium
Azure Sphere Unsigned Code Execution Vulnerability
CVE-2021-42323 1 Microsoft 1 Azure Real Time Operating System 2026-08-19 3.3 Low
Azure RTOS Information Disclosure Vulnerability
CVE-2021-41376 1 Microsoft 1 Azure Sphere 2026-08-19 2.3 Low
Azure Sphere Information Disclosure Vulnerability
CVE-2021-41375 1 Microsoft 1 Azure Sphere 2026-08-19 4.4 Medium
Azure Sphere Information Disclosure Vulnerability
CVE-2021-41374 1 Microsoft 1 Azure Sphere 2026-08-19 6.7 Medium
Azure Sphere Information Disclosure Vulnerability
CVE-2021-42304 1 Microsoft 1 Azure Real Time Operating System 2026-08-19 6.6 Medium
Azure RTOS Elevation of Privilege Vulnerability
CVE-2021-42303 1 Microsoft 1 Azure Real Time Operating System 2026-08-19 6.6 Medium
Azure RTOS Elevation of Privilege Vulnerability
CVE-2021-42302 1 Microsoft 1 Azure Real Time Operating System 2026-08-19 6.6 Medium
Azure RTOS Elevation of Privilege Vulnerability
CVE-2021-42301 1 Microsoft 2 Azure Real Time Operating System, Azure Rtos 2026-08-19 3.3 Low
Azure RTOS Information Disclosure Vulnerability
CVE-2021-42300 1 Microsoft 1 Azure Sphere 2026-08-19 6 Medium
Azure Sphere Tampering Vulnerability