Export limit exceeded: 29160 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (29160 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-69922 1 Microsoft 3 365 Apps, Office 2021, Office 2024 2026-10-14 6.5 Medium
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-70214 1 Microsoft 3 365 Apps, Office 2021, Office 2024 2026-10-14 5.5 Medium
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-72923 1 Microsoft 2 Openapi.readers, Openapi.yamlreader 2026-10-14 7.5 High
The OpenAPI.NET SDK contains a useful object model for OpenAPI documents in .NET along with common serializers to extract raw OpenAPI JSON and YAML documents from the model. In Microsoft.OpenApi.Readers versions before 1.6.30 and Microsoft.OpenApi.YamlReader from 2.0.0-preview.11 through 2.11.0 and 3.0.0 through 3.9.0, parsing a YAML OpenAPI document with nested anchors and aliases can consume uncontrolled memory. SharpYaml represents aliases as shared nodes in a small directed acyclic graph, but conversion to independent OpenAPI or System.Text.Json.Nodes.JsonNode trees duplicates every aliased path; without a node-count or nesting-depth limit, N nested anchors referenced k times can require k^N materialized nodes and terminate the process through an out-of-memory condition. The fixed readers bound materialization to 5,000,000 nodes and a nesting depth of 64 by default and report an OpenApiDiagnostic error when a limit is exceeded. This vulnerability is fixed in Microsoft.OpenApi.Readers 1.6.30 and Microsoft.OpenApi.YamlReader 2.12.0 and 3.10.0.
CVE-2026-70206 1 Microsoft 13 365 Apps, Microsoft 365, Microsoft 365 Apps For Enterprise and 10 more 2026-10-14 6.5 Medium
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-105715 1 Microsoft 7 365 Apps, Microsoft 365, Office 2021 and 4 more 2026-10-14 7.5 High
Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-97750 1 Microsoft 8 365 Apps, Microsoft 365, Office 2021 and 5 more 2026-10-14 8.8 High
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97755 1 Microsoft 9 365 Apps, Microsoft 365, Office 2021 and 6 more 2026-10-14 8.8 High
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-102859 1 Microsoft 1 Sharepoint Server 2026-10-14 4.6 Medium
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-97782 1 Microsoft 1 Sharepoint Server 2026-10-14 6.8 Medium
Observable discrepancy in Microsoft Office SharePoint allows an authorized attacker to perform tampering over a network.
CVE-2026-102864 1 Microsoft 1 Sharepoint Server 2026-10-14 4.6 Medium
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-102862 1 Microsoft 1 Sharepoint Server 2026-10-14 8.8 High
Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-102861 1 Microsoft 2 Sharepoint Server, Sharepoint Server Subscription Edition 2026-10-14 8.8 High
Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-110150 2 Google, Microsoft 2 Chrome, Windows 2026-10-14 5.5 Medium
Privilege elevation in Installer in Google Chrome on on Windows prior to 155.0.8059.79 allowed a local attacker to obtain sensitive information via a local program. (Chromium security severity: High)
CVE-2026-88204 1 Microsoft 1 Sharepoint Server 2026-10-14 7.3 High
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-100209 1 Microsoft 7 365 Apps, Microsoft 365, Office 2021 and 4 more 2026-10-14 8.8 High
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-100211 1 Microsoft 12 365 Apps, Microsoft 365, Microsoft 365 Apps For Enterprise and 9 more 2026-10-14 8.8 High
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-77910 1 Microsoft 7 Exchange Server 2016, Exchange Server 2019, Exchange Server Se and 4 more 2026-10-14 8.8 High
Incorrect authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-106340 2 Google, Microsoft 2 Chrome, Windows 2026-10-14 4.6 Medium
Missing authorization in CredentialProvider in Google Chrome on on Windows prior to 155.0.8059.39 allowed a local attacker to obtain sensitive information via physical access. (Chromium security severity: Low)
CVE-2026-100212 1 Microsoft 14 365 Apps, Microsoft 365, Microsoft 365 Apps For Enterprise and 11 more 2026-10-14 8.8 High
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-106355 2 Google, Microsoft 2 Chrome, Windows 2026-10-14 5.3 Medium
Missing authorization in Media in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. (Chromium security severity: Low)