Export limit exceeded: 10158 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (10158 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-70201 1 Microsoft 12 Windows Server 2012, Windows Server 2012 (server Core Installation), Windows Server 2012 R2 and 9 more 2026-10-14 5.5 Medium
Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service locally.
CVE-2026-109676 1 Freerdp 1 Freerdp 2026-10-14 8.8 High
FreeRDP from 3.0.0-beta1 before 3.32.0 contains a use-after-free vulnerability in smartcard handling that allows attackers to access a freed smartcard handle object after an invalid connect operation. Attackers can trigger an invalid smartcard connect operation to cause reuse of the freed handle, leading to memory corruption or crashes.
CVE-2026-92388 2026-10-14 6.5 Medium
A flaw was found in curl. A remote malicious server can cause a Denial of Service (DoS) or memory corruption in applications that enable File Transfer Protocol (FTP) wildcard matching. When a wildcard listing operation fails, curl does not properly reset its internal callback handlers before the connection handle is reused or duplicated. An application that subsequently reuses or clones this corrupted handle may experience an immediate application crash or unsafe memory access.
CVE-2026-104342 2026-10-14 7.8 High
Adobe Framemaker is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-103843 2026-10-14 7.8 High
Substance3D - Stager is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-109711 1 Mozilla 2 Firefox, Thunderbird 2026-10-14 5.4 Medium
Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
CVE-2026-69765 1 Microsoft 2 Windows Server 2025, Windows Server 2025 (server Core Installation) 2026-10-14 8.8 High
Use after free in Windows Storport Miniport Driver allows an unauthorized attacker to execute code over a network.
CVE-2026-85197 1 Redhat 2 Enterprise Linux, Enterprise Linux Eus 2026-10-14 7.6 High
A flaw was found in libsoup. A malicious HTTP/2 server or a Man-in-the-Middle (MITM) attacker can exploit a heap use-after-free vulnerability in the HTTP/2 client implementation. This occurs when a GNOME application uploads a file using HTTP/2, and the server sends a GOAWAY frame while the file body is being read asynchronously. This can lead to memory corruption, potentially resulting in information disclosure or arbitrary code execution.
CVE-2026-109732 1 Mozilla 1 Firefox 2026-10-14 5.4 Medium
Use-after-free in the DOM: Streams component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
CVE-2026-69830 1 Microsoft 8 Windows 10 1607, Windows 10 1809, Windows Server 2012 and 5 more 2026-10-14 8.1 High
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
CVE-2026-69743 1 Microsoft 6 Windows 11 23h2, Windows 11 24h2, Windows 11 25h2 and 3 more 2026-10-14 7 High
Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69452 1 Microsoft 15 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 12 more 2026-10-14 7.1 High
Use after free in Windows Enterprise App Management allows an authorized attacker to elevate privileges over a network.
CVE-2026-69798 1 Microsoft 15 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 12 more 2026-10-13 7.8 High
Use after free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally.
CVE-2026-85876 1 Microsoft 6 Microsoft Sql Server 2019 For X64-based Systems \(cu32\), Microsoft Sql Server 2022 For X64-based Systems \(cu27\), Microsoft Sql Server 2025 For X64-based Systems \(cu9\) and 3 more 2026-10-13 7 High
Use after free in SQL Server allows an authorized attacker to elevate privileges locally.
CVE-2026-108468 1 Microsoft 15 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 12 more 2026-10-13 7 High
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-108465 1 Microsoft 11 Windows 10 1809, Windows 10 21h2, Windows 10 22h2 and 8 more 2026-10-13 7 High
Use after free in Windows Update Delivery Optimization allows an authorized attacker to elevate privileges locally.
CVE-2026-108464 1 Microsoft 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more 2026-10-13 7 High
Use after free in Software Protection Platform (SPP) allows an authorized attacker to elevate privileges locally.
CVE-2026-108461 1 Microsoft 9 Windows 10 1809, Windows 10 21h2, Windows 10 22h2 and 6 more 2026-10-13 7 High
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
CVE-2026-109741 1 Mozilla 1 Firefox 2026-10-13 5.4 Medium
Use-after-free in the Storage: Bucket File System component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
CVE-2026-109761 1 Mozilla 1 Firefox 2026-10-13 5.4 Medium
Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.