Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (10685 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-94055 1 Exim 1 Exim 2026-09-22 3.7 Low
Exim before 4.100.1, when certain non-default TLS settings are used with GnuTLS, has a use-after-free.
CVE-2026-69775 1 Microsoft 4 Windows 11 23h2, Windows 11 23h2, Windows Server 2025 and 1 more 2026-09-22 7.1 High
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges over a network.
CVE-2026-69782 1 Microsoft 8 Windows 10 1607, Windows 10 1809, Windows Server 2012 and 5 more 2026-09-22 8.1 High
Concurrent execution using shared resource with improper synchronization ('race condition') in DNS Server allows an unauthorized attacker to execute code over a network.
CVE-2026-69784 1 Microsoft 12 Windows 10 21h2, Windows 10 21h2, Windows 10 22h2 and 9 more 2026-09-22 8.8 High
Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.
CVE-2026-69791 1 Microsoft 18 Windows 10 1809, Windows 10 21h2, Windows 10 21h2 and 15 more 2026-09-22 7 High
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
CVE-2026-11388 1 Rti 1 Connext Professional 2026-09-22 N/A
Double Free vulnerability in RTI Connext Professional (Core Libraries) allows File Manipulation. This issue affects Connext Professional: from 7.4.0 before 7.7.0.1, from 7.1.0 before 7.3.1.6.
CVE-2026-63652 1 Freerdp 1 Freerdp 2026-09-22 6.5 Medium
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.28.0, rdpsnd_server_recv_formats in channels/rdpsnd/server/rdpsnd_main.c frees context->client_formats on a malformed Client Audio Formats PDU without clearing the owning pointer or num_client_formats. An authenticated RDP client can trigger an error such as a cbSize larger than the remaining record, leave the dangling pointer in the server context, and cause rdpsnd_server_context_free to free the same allocation again at session teardown. This reliably terminates the server and can create allocator-dependent heap corruption. This issue is fixed in version 3.28.0.
CVE-2026-94084 1 Oisf 1 Suricata 2026-09-22 9.4 Critical
Suricata before 8.0.7 has an Http2ThreadMultiBuf use-after-free when a transaction is inspected by rules that use http.response_header with and without a transform.
CVE-2026-8849 1 Rti 1 Connext Professional 2026-09-22 N/A
Use After Free vulnerability in RTI Connext Professional (Security Plugins) allows File Manipulation. This issue affects Connext Professional: from 7.6.0 before 7.7.0.1.
CVE-2026-69652 1 Microsoft 21 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 18 more 2026-09-22 7 High
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-69654 1 Microsoft 21 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 18 more 2026-09-22 7 High
Use after free in Windows Accounts Control allows an authorized attacker to elevate privileges locally.
CVE-2026-69706 1 Microsoft 26 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 23 more 2026-09-22 7.1 High
Use after free in Windows Win32K allows an authorized attacker to elevate privileges over a network.
CVE-2026-69708 1 Microsoft 18 Windows 10 1809, Windows 10 21h2, Windows 10 21h2 and 15 more 2026-09-22 7 High
Use after free in Windows Web Platform Storage allows an authorized attacker to elevate privileges locally.
CVE-2026-69711 1 Microsoft 21 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 18 more 2026-09-22 7 High
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69712 1 Microsoft 12 Windows Server 2012, Windows Server 2012 (server Core Installation), Windows Server 2012 R2 and 9 more 2026-09-22 8.8 High
Use after free in Windows Key Distribution Center allows an authorized attacker to execute code over a network.
CVE-2025-8410 1 Rti 1 Connext Professional 2026-09-22 7.4 High
Use After Free vulnerability in RTI Connext Professional (Security Plugins) allows File Manipulation. This issue affects Connext Professional: from 7.5.0 before 7.6.0.
CVE-2026-69730 1 Microsoft 14 Windows 10 1607, Windows 10 1809, Windows Server 2012 and 11 more 2026-09-22 9.8 Critical
Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.
CVE-2026-71351 1 Microsoft 26 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 23 more 2026-09-22 7 High
Double free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.
CVE-2026-71353 1 Microsoft 26 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 23 more 2026-09-22 7 High
Double free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.
CVE-2026-72926 1 Microsoft 21 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 18 more 2026-09-22 7 High
Use after free in Windows Internet Connection Sharing (ICS) allows an authorized attacker to elevate privileges locally.