Export limit exceeded: 409415 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Search Results (22091 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-83573 1 Microsoft 15 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 12 more 2026-10-15 6.8 Medium
Integer overflow or wraparound in Windows Kernel Mode Driver allows an unauthorized attacker to elevate privileges with a physical attack.
CVE-2026-71347 1 Microsoft 9 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 6 more 2026-10-15 6.4 Medium
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Security Center allows an authorized attacker to elevate privileges locally.
CVE-2026-88119 1 Microsoft 12 Windows Server 2012, Windows Server 2012 (server Core Installation), Windows Server 2012 R2 and 9 more 2026-10-15 8.1 High
Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
CVE-2026-88120 1 Microsoft 12 Windows Server 2012, Windows Server 2012 (server Core Installation), Windows Server 2012 R2 and 9 more 2026-10-15 8.1 High
Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
CVE-2026-69982 1 Microsoft 7 Windows 10 1607, Windows 10 1809, Windows Server 2012 R2 and 4 more 2026-10-15 5.9 Medium
Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-103821 3 Adobe, Apple, Microsoft 3 Substance 3d Designer, Macos, Windows 2026-10-15 7.8 High
Substance3D - Designer is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-103822 3 Adobe, Apple, Microsoft 3 Substance 3d Designer, Macos, Windows 2026-10-15 5.5 Medium
Substance3D - Designer is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-103823 3 Adobe, Apple, Microsoft 3 Substance 3d Designer, Macos, Windows 2026-10-15 5.5 Medium
Substance3D - Designer is affected by a Stack-based Buffer Overflow vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-103824 3 Adobe, Apple, Microsoft 3 Substance 3d Designer, Macos, Windows 2026-10-15 5.5 Medium
Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-103825 3 Adobe, Apple, Microsoft 3 Substance 3d Designer, Macos, Windows 2026-10-15 5.5 Medium
Substance3D - Designer is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-103826 3 Adobe, Apple, Microsoft 3 Substance 3d Designer, Macos, Windows 2026-10-15 5.5 Medium
Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-103827 3 Adobe, Apple, Microsoft 3 Substance 3d Designer, Macos, Windows 2026-10-15 5.5 Medium
Substance3D - Designer is affected by a Stack-based Buffer Overflow vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-103828 3 Adobe, Apple, Microsoft 3 Substance 3d Designer, Macos, Windows 2026-10-15 5.5 Medium
Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-103829 3 Adobe, Apple, Microsoft 3 Substance 3d Designer, Macos, Windows 2026-10-15 5.5 Medium
Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2018-8014 6 Apache, Canonical, Debian and 3 more 12 Tomcat, Ubuntu Linux, Debian Linux and 9 more 2026-10-15 N/A
The defaults settings for the CORS filter provided in Apache Tomcat 9.0.0.M1 to 9.0.8, 8.5.0 to 8.5.31, 8.0.0.RC1 to 8.0.52, 7.0.41 to 7.0.88 are insecure and enable 'supportsCredentials' for all origins. It is expected that users of the CORS filter will have configured it appropriately for their environment rather than using it in the default configuration. Therefore, it is expected that most users will not be impacted by this issue.
CVE-2018-12224 2 Intel, Microsoft 2 Graphics Driver, Windows 2026-10-15 N/A
Buffer leakage in igdkm64.sys in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 may allow an authenticated user to potentially enable information disclosure via local access.
CVE-2018-12210 2 Intel, Microsoft 2 Graphics Driver, Windows 2026-10-15 N/A
Multiple pointer dereferences in User Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 potentially enables an unprivileged user to cause a denial of service via local access.
CVE-2026-83862 1 Microsoft 14 Windows 10 1607, Windows 10 1809, Windows Server 2012 and 11 more 2026-10-15 9.8 Critical
Use after free in Windows Network Load Balancing allows an unauthorized attacker to execute code over a network.
CVE-2026-32157 1 Microsoft 26 Remote Desktop, Remote Desktop Client, Windows 10 1607 and 23 more 2026-10-15 8.8 High
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
CVE-2026-91807 4 Apple, Foxit, Foxitsoftware and 1 more 6 Macos, Pdf Editor, Pdf Reader and 3 more 2026-10-15 6.1 Medium
A heap-based out-of-bounds read vulnerability exists in Foxit PDF Editor/Reader’s handling of malformed image soft-mask data. Insufficient validation of the soft-mask data attribute during image parsing may cause an arithmetic underflow, resulting in an out-of-bounds read and application crash.