Export limit exceeded: 408834 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (408834 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-111233 | 1 Netgate | 1 Pfsense | 2026-10-15 | 4.7 Medium |
| Netgate pfSense CE 2.7.1 through 2.9.0 contains a reflected cross-site scripting vulnerability in firewall_rules.php that allows remote attackers to inject script via the unencoded if parameter. When the non-default Require Firewall Interface option is enabled, attackers can lure users with firewall rules privileges into opening a crafted GET link to execute script in the WebGUI with their privileges. | ||||
| CVE-2026-111223 | 1 Netgate | 1 Pfsense | 2026-10-15 | 7.2 High |
| Netgate pfSense CE 2.7.0 through 2.9.0 contains a configuration injection vulnerability that allows authenticated users with IPsec Mobile privileges to execute commands as root via the login_banner field. Attackers can submit a single-line banner containing '}' to escape the unquoted strongswan.conf attr value and define charon.start-scripts entries that charon executes as root on restart. | ||||
| CVE-2026-111228 | 1 Netgate | 1 Pfsense | 2026-10-15 | 5.5 Medium |
| Netgate pfSense CE from 2.7.1 through 2.9.0 contains a CRLF injection vulnerability in services_unbound_advanced.php that allows authenticated users with DNS Resolver: Advanced privilege to inject Unbound directives. Attackers can embed CR/LF characters in the unvalidated sock_queue_timeout parameter, which is written raw into unbound.conf, to override local records and forwarding for all clients. | ||||
| CVE-2026-83573 | 1 Microsoft | 15 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 12 more | 2026-10-15 | 6.8 Medium |
| Integer overflow or wraparound in Windows Kernel Mode Driver allows an unauthorized attacker to elevate privileges with a physical attack. | ||||
| CVE-2026-71347 | 1 Microsoft | 9 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 6 more | 2026-10-15 | 6.4 Medium |
| Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Security Center allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-109468 | 1 Microsoft | 3 Microsoft Visual Studio 2026 Version 18.10, System.formats.cbor, Visual Studio 2022 | 2026-10-15 | 7.5 High |
| Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network. | ||||
| CVE-2026-108452 | 1 Microsoft | 1 Sharepoint Server | 2026-10-15 | 8.8 High |
| Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | ||||
| CVE-2026-108451 | 1 Microsoft | 3 365 Apps, Office 2021, Office 2024 | 2026-10-15 | 8.8 High |
| Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-108450 | 1 Microsoft | 3 365 Apps, Office 2021, Office 2024 | 2026-10-15 | 8.8 High |
| Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-108449 | 1 Microsoft | 6 365 Apps, Office 2021, Office 2024 and 3 more | 2026-10-15 | 8.8 High |
| Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-108448 | 1 Microsoft | 6 365 Apps, Office 2021, Office 2024 and 3 more | 2026-10-15 | 7.5 High |
| Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-108447 | 1 Microsoft | 3 365 Apps, Office 2021, Office 2024 | 2026-10-15 | 8.8 High |
| Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-108446 | 1 Microsoft | 6 365 Apps, Office 2021, Office 2024 and 3 more | 2026-10-15 | 8.8 High |
| Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-108445 | 1 Microsoft | 6 365 Apps, Office 2021, Office 2024 and 3 more | 2026-10-15 | 8.8 High |
| Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-108443 | 1 Microsoft | 6 365 Apps, Office 2021, Office 2024 and 3 more | 2026-10-15 | 8.8 High |
| Off-by-one error in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-108442 | 1 Microsoft | 6 365 Apps, Office 2021, Office 2024 and 3 more | 2026-10-15 | 8.8 High |
| Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-108441 | 1 Microsoft | 6 365 Apps, Office 2021, Office 2024 and 3 more | 2026-10-15 | 8.8 High |
| Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-108440 | 1 Microsoft | 6 365 Apps, Office 2021, Office 2024 and 3 more | 2026-10-15 | 8.8 High |
| Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-108439 | 1 Microsoft | 6 365 Apps, Office 2021, Office 2024 and 3 more | 2026-10-15 | 8.8 High |
| Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-108438 | 1 Microsoft | 4 365 Apps, Office 365, Office Macos 2021 and 1 more | 2026-10-15 | 6.5 Medium |
| Use after free in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. | ||||