Export limit exceeded: 385147 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 26440 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (26440 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2021-26412 1 Microsoft 1 Exchange Server 2026-08-19 9.1 Critical
Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2021-24110 1 Microsoft 2 Hevc Video Extensions, High Efficiency Video Coding 2026-08-19 7.8 High
HEVC Video Extensions Remote Code Execution Vulnerability
CVE-2021-24107 1 Microsoft 19 Windows 10, Windows 10 1507, Windows 10 1607 and 16 more 2026-08-19 5.5 Medium
Windows Event Tracing Information Disclosure Vulnerability
CVE-2021-24090 1 Microsoft 8 Windows 10, Windows 10 1809, Windows 10 1909 and 5 more 2026-08-19 7.8 High
Windows Error Reporting Elevation of Privilege Vulnerability
CVE-2021-24104 1 Microsoft 6 Sharepoint Enterprise Server, Sharepoint Foundation, Sharepoint Foundation 2013 and 3 more 2026-08-19 4.6 Medium
Microsoft SharePoint Server Spoofing Vulnerability
CVE-2021-1640 1 Microsoft 19 Windows 10, Windows 10 1507, Windows 10 1607 and 16 more 2026-08-19 7.8 High
Windows Print Spooler Elevation of Privilege Vulnerability
CVE-2021-24089 1 Microsoft 2 Hevc Video Extensions, High Efficiency Video Coding 2026-08-19 7.8 High
HEVC Video Extensions Remote Code Execution Vulnerability
CVE-2021-27083 1 Microsoft 1 Remote Development 2026-08-19 7.8 High
Remote Development Extension for Visual Studio Code Remote Code Execution Vulnerability
CVE-2021-27082 1 Microsoft 1 Quantum Development Kit 2026-08-19 7.8 High
Quantum Development Kit for Visual Studio Code Remote Code Execution Vulnerability
CVE-2021-27081 1 Microsoft 2 Eslint, Visual Studio Code Eslint Extension 2026-08-19 7.8 High
Visual Studio Code ESLint Extension Remote Code Execution Vulnerability
CVE-2021-27080 1 Microsoft 1 Azure Sphere 2026-08-19 9.3 Critical
Azure Sphere Unsigned Code Execution Vulnerability
CVE-2021-27077 1 Microsoft 19 Windows 10, Windows 10 1507, Windows 10 1607 and 16 more 2026-08-19 7.8 High
Windows Win32k Elevation of Privilege Vulnerability
CVE-2021-27075 1 Microsoft 6 Azure Container Instance, Azure Container Instances, Azure Container Registry and 3 more 2026-08-19 6.8 Medium
Azure Virtual Machine Information Disclosure Vulnerability
CVE-2021-27074 1 Microsoft 1 Azure Sphere 2026-08-19 6.2 Medium
Azure Sphere Unsigned Code Execution Vulnerability
CVE-2021-27070 1 Microsoft 6 Windows 10, Windows 10 1809, Windows 10 20h2 and 3 more 2026-08-19 7.3 High
Windows 10 Update Assistant Elevation of Privilege Vulnerability
CVE-2021-27060 1 Microsoft 1 Visual Studio Code 2026-08-19 7.8 High
Visual Studio Code Remote Code Execution Vulnerability
CVE-2021-24108 1 Microsoft 6 365 Apps, Excel, Office and 3 more 2026-08-19 7.8 High
Microsoft Office Remote Code Execution Vulnerability
CVE-2021-24095 1 Microsoft 9 Windows 10, Windows 10 1809, Windows 10 1909 and 6 more 2026-08-19 7 High
DirectX Elevation of Privilege Vulnerability
CVE-2021-1729 1 Microsoft 9 Windows 10, Windows 10 1809, Windows 10 1909 and 6 more 2026-08-19 7.1 High
Windows Update Stack Setup Elevation of Privilege Vulnerability
CVE-2021-41372 1 Microsoft 1 Power Bi Report Server 2026-08-19 7.6 High
A Cross-Site Scripting (XSS) and Cross-Site Request Forgery (CSRF) vulnerability exists when Power BI Report Server Template file (pbix) containing HTML files is uploaded to the server and HTML files are accessed directly by the victim. Combining these 2 vulnerabilities together, an attacker is able to upload malicious Power BI templates files to the server using the victim's session and run scripts in the security context of the user and perform privilege escalation in case the victim has admin privileges when the victim access one of the HTML files present in the malicious Power BI template uploaded. The security update addresses the vulnerability by helping to ensure that Power BI Report Server properly sanitize file uploads.