Export limit exceeded: 390712 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (932 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-48449 3 Adobe, Linux, Microsoft 4 Campaign, Campaign Classic, Linux Kernel and 1 more 2026-07-30 10 Critical
Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction. Scope is changed.
CVE-2026-13776 4 Apple, Google, Linux and 1 more 4 Macos, Chrome, Linux Kernel and 1 more 2026-07-29 9.6 Critical
Type Confusion in Dawn in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-13882 4 Apple, Google, Linux and 1 more 4 Macos, Chrome, Linux Kernel and 1 more 2026-07-28 9.6 Critical
Race in USB in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-8505 5 Apple, Ibm, Langflow and 2 more 5 Macos, Langflow Oss, Langflow and 2 more 2026-07-27 9.8 Critical
IBM Langflow OSS 1.0.0 through 1.10.0 has a vulnerability in Langflow's webhook authentication logic allows unauthenticated users to trigger the execution of any flow. The system incorrectly bypasses API key validation when the WEBHOOK_AUTH_ENABLE configuration is set to False (which is the default setting). This allows a remote attacker who knows a flow's UUID to execute it as if they were the owner, potentially leading to Remote Code Execution (RCE).
CVE-2026-48334 2 Adobe, Microsoft 4 Illustrator, Illustrator Desktop 2025, Illustrator Desktop 2026 and 1 more 2026-07-27 9.3 Critical
Illustrator is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.
CVE-2026-48561 1 Microsoft 4 365 Copilot, 365 Copilot Android, 365 Copilot Ios and 1 more 2026-07-26 9.6 Critical
Improper neutralization of special elements used in a command ('command injection') in Copilot Chat (Microsoft Edge) allows an unauthorized attacker to execute code over a network.
CVE-2026-15773 2 Google, Microsoft 2 Chrome, Windows 2026-07-26 9.6 Critical
Use after free in Core in Google Chrome on Windows prior to 150.0.7871.125 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-13783 4 Apple, Google, Linux and 1 more 4 Macos, Chrome, Linux Kernel and 1 more 2026-07-26 9.6 Critical
Use after free in Views in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-62835 1 Microsoft 1 Azure Portal 2026-07-25 9.3 Critical
Improper authorization in Azure Portal allows an unauthorized attacker to disclose information over a network.
CVE-2026-56191 1 Microsoft 1 Exchange Online 2026-07-24 10 Critical
Improper authentication in Microsoft Exchange Online allows an unauthorized attacker to perform tampering over a network.
CVE-2026-58630 1 Microsoft 2 Azure App Service, Azure App Service For Linux 2026-07-24 10 Critical
Improper access control in Azure App Service allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-58275 1 Microsoft 1 Azure Dns 2026-07-24 10 Critical
Missing authorization in Azure DNS allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-62825 1 Microsoft 1 Azure Key Vault 2026-07-24 10 Critical
Improper authentication in Azure Key Vault allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-57106 1 Microsoft 2 Office Purview Data Governance, Purview Data Governance 2026-07-24 10 Critical
Server-side request forgery (ssrf) in Data Quality allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-50517 1 Microsoft 1 365 Copilot 2026-07-24 9.9 Critical
Deserialization of untrusted data in M365 Copilot allows an authorized attacker to execute code over a network.
CVE-2026-56160 1 Microsoft 1 Azure Red Hat Openshift 2026-07-24 9.1 Critical
Improper authorization in Azure Red Hat OpenShift (ARO) allows an authorized attacker to elevate privileges over a network.
CVE-2026-54120 1 Microsoft 1 Surface Management Services 2026-07-24 9.9 Critical
Improper input validation in Microsoft Surface allows an authorized attacker to execute code over a network.
CVE-2026-56165 1 Microsoft 2 Account, Microsoft Account 2026-07-24 9.8 Critical
Heap-based buffer overflow in Microsoft Account allows an unauthorized attacker to execute code over a network.
CVE-2026-56163 1 Microsoft 1 Azure Kubernetes Service 2026-07-24 10 Critical
Missing authentication for critical function in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-13446 5 Apple, Ibm, Langflow and 2 more 5 Macos, Langflow Oss, Langflow and 2 more 2026-07-23 9.8 Critical
IBM Langflow OSS 1.0.0 through 1.10.1 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data.