Export limit exceeded: 29086 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 409006 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

You must be logged in to use the 'userTag' filter.
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (409006 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-108439 1 Microsoft 6 365 Apps, Office 2021, Office 2024 and 3 more 2026-10-16 8.8 High
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-108440 1 Microsoft 6 365 Apps, Office 2021, Office 2024 and 3 more 2026-10-16 8.8 High
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-108441 1 Microsoft 6 365 Apps, Office 2021, Office 2024 and 3 more 2026-10-16 8.8 High
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-108442 1 Microsoft 6 365 Apps, Office 2021, Office 2024 and 3 more 2026-10-16 8.8 High
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-108443 1 Microsoft 6 365 Apps, Office 2021, Office 2024 and 3 more 2026-10-16 8.8 High
Off-by-one error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-108444 1 Microsoft 6 365 Apps, Office 2021, Office 2024 and 3 more 2026-10-16 8.8 High
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
CVE-2026-108445 1 Microsoft 6 365 Apps, Office 2021, Office 2024 and 3 more 2026-10-16 8.8 High
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-108446 1 Microsoft 6 365 Apps, Office 2021, Office 2024 and 3 more 2026-10-16 8.8 High
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-108447 1 Microsoft 3 365 Apps, Office 2021, Office 2024 2026-10-16 8.8 High
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-108448 1 Microsoft 6 365 Apps, Office 2021, Office 2024 and 3 more 2026-10-16 7.5 High
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-108449 1 Microsoft 6 365 Apps, Office 2021, Office 2024 and 3 more 2026-10-16 8.8 High
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-108450 1 Microsoft 3 365 Apps, Office 2021, Office 2024 2026-10-16 8.8 High
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-108451 1 Microsoft 3 365 Apps, Office 2021, Office 2024 2026-10-16 8.8 High
Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-108452 1 Microsoft 1 Sharepoint Server 2026-10-16 8.8 High
Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-108453 1 Microsoft 6 365 Apps, Office 2021, Office 2024 and 3 more 2026-10-16 6.5 Medium
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
CVE-2026-108454 1 Microsoft 6 365 Apps, Office 2021, Office 2024 and 3 more 2026-10-16 6.5 Medium
Buffer over-read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
CVE-2026-108455 1 Microsoft 6 365 Apps, Office 2021, Office 2024 and 3 more 2026-10-16 6.5 Medium
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
CVE-2026-109468 1 Microsoft 3 Microsoft Visual Studio 2026 Version 18.10, System.formats.cbor, Visual Studio 2022 2026-10-16 7.5 High
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.
CVE-2026-111237 1 Ultralytics 1 Fastsam 2026-10-16 5.3 Medium
A weakness has been identified in Ultralytics FastSAM up to b4ed20c2fed75eadc5aa7d8b09fedd137b873b52. This affects the function session.get_modelmeta.custom_metadata_map of the file ultralytics/nn/autobackend.py of the component AutoBackend Model Loading. This manipulation of the argument imgsz/names/kpt_shape causes improper neutralization of directives in dynamically evaluated code. The attack requires local access. This product uses a rolling release model to deliver continuous updates. As a result, specific version information for affected or updated releases is not available. The project was informed of the problem early through an issue report but has not responded yet.
CVE-2026-110459 2026-10-16 8.6 High
A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to obtain information, make unauthorized changes, and execute a Denial of Service (DoS) attack on the device.