Export limit exceeded: 10597 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (10597 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-98112 1 Linux 1 Linux Kernel 2026-10-28 7.8 High
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix listener task lifetime on netdev events The listener thread exits when its listening socket is shutdown. The netdevice notifier shuts down the socket before calling kthread_stop(), so the task_struct can be freed before kthread_stop() gets its reference. Create the listener in a stopped state and hold an extra task_struct reference until kthread_stop_put() completes. Also stop and release listeners before freeing their interface records during TCP teardown.
CVE-2026-74969 1 Mozilla 2 Firefox, Thunderbird 2026-10-28 8.8 High
Race condition, use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-63946 1 Linux 1 Linux Kernel 2026-10-28 8.8 High
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: fix UAF in iso_recv_frame iso_recv_frame reads conn->sk under iso_conn_lock but releases the lock before using sk, with no reference held. A concurrent iso_sock_kill() can free sk in that window, causing use-after-free on sk->sk_state and sock_queue_rcv_skb(). Fix by replacing the bare pointer read with iso_sock_hold(conn), which calls sock_hold() while the spinlock is held, atomically elevating the refcount before the lock drops. Add a drop_put label so sock_put() is called on all exit paths where the hold succeeded.
CVE-2026-72969 1 Microsoft 13 Windows 11 23h2, Windows 11 23h2, Windows 11 24h2 and 10 more 2026-10-28 7 High
Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
CVE-2026-72968 1 Microsoft 23 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 20 more 2026-10-28 7 High
Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
CVE-2026-72955 1 Microsoft 13 Windows 11 23h2, Windows 11 23h2, Windows 11 24h2 and 10 more 2026-10-28 7 High
Use after free in Windows Application Compatibility Cache allows an authorized attacker to elevate privileges locally.
CVE-2026-85342 1 Microsoft 27 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 24 more 2026-10-28 7 High
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
CVE-2026-72934 1 Microsoft 12 Windows 11 23h2, Windows 11 23h2, Windows 11 24h2 and 9 more 2026-10-28 7 High
Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
CVE-2026-85352 1 Microsoft 27 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 24 more 2026-10-28 7 High
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
CVE-2026-85354 1 Microsoft 28 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 25 more 2026-10-28 7 High
Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
CVE-2026-81971 1 Microsoft 28 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 25 more 2026-10-28 7 High
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVE-2026-71347 1 Microsoft 16 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 13 more 2026-10-28 6.4 Medium
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Security Center allows an authorized attacker to elevate privileges locally.
CVE-2026-85357 1 Microsoft 11 Windows 11 23h2, Windows 11 23h2, Windows 11 24h2 and 8 more 2026-10-28 7 High
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Phone Service allows an authorized attacker to elevate privileges locally.
CVE-2026-70272 1 Microsoft 28 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 25 more 2026-10-28 7 High
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-85361 1 Microsoft 28 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 25 more 2026-10-28 7 High
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-70252 1 Microsoft 28 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 25 more 2026-10-28 7 High
Use after free in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-70250 1 Microsoft 12 Windows Server 2012, Windows Server 2012 (server Core Installation), Windows Server 2012 R2 and 9 more 2026-10-28 8.8 High
Use after free in Windows DHCP Client allows an unauthorized attacker to execute code over an adjacent network.
CVE-2026-85364 1 Microsoft 28 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 25 more 2026-10-28 7 High
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-85367 1 Microsoft 23 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 20 more 2026-10-28 7 High
Use after free in Windows Cash Drawer Protocol Provider allows an authorized attacker to elevate privileges locally.
CVE-2026-70274 1 Microsoft 12 Windows 11 23h2, Windows 11 23h2, Windows 11 24h2 and 9 more 2026-10-28 7.8 High
Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.