Export limit exceeded: 395078 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Expected end of text, found '/' (at char 32), (line:1, col:33)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (395078 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-92073 1 Mozilla 1 Firefox 2026-09-16 8.8 High
Privilege escalation in the Enterprise Policies component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
CVE-2026-92017 1 Mozilla 1 Firefox 2026-09-16 8.8 High
Privilege escalation in the DOM: Service Workers component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
CVE-2026-92047 1 Mozilla 1 Firefox 2026-09-16 8.8 High
Privilege escalation in the Crash Reporting component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
CVE-2026-92015 1 Mozilla 1 Firefox 2026-09-16 8.8 High
Privilege escalation in the WebExtensions component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
CVE-2026-92011 1 Mozilla 1 Firefox 2026-09-16 8.8 High
Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
CVE-2026-92013 1 Mozilla 1 Firefox 2026-09-16 8.8 High
Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
CVE-2026-92052 1 Mozilla 1 Firefox 2026-09-16 8.8 High
Privilege escalation due to uninitialized memory in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
CVE-2026-92010 1 Mozilla 1 Firefox 2026-09-16 8.8 High
Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
CVE-2026-92014 1 Mozilla 1 Firefox 2026-09-16 8.8 High
Privilege escalation due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox ESR 115.41, Firefox ESR 140.16, and Thunderbird 140.16.
CVE-2026-91742 1 Google 1 Chrome 2026-09-16 N/A
Confused deputy in PriceTracking in Google Chrome on on iOS prior to 153.0.8010.47 allowed a remote attacker leveraging social engineering to bypass system access restrictions into a privileged page via crafted network traffic. (Chromium security severity: Medium)
CVE-2026-89156 1 Pcre 1 Pcre2 2026-09-16 2.9 Low
PCRE2 before 10.48 has a pcre2_match out-of-bounds read after a JIT fallback when an attacker can provide invalid UTF data.
CVE-2026-69646 1 Microsoft 4 Skype For Business Server, Skype For Business Server 2015, Skype For Business Server 2019 and 1 more 2026-09-16 8.3 High
Improper verification of cryptographic signature in Skype for Business allows an unauthorized attacker to perform spoofing over an adjacent network.
CVE-2026-69642 1 Microsoft 4 Skype For Business Server, Skype For Business Server 2015, Skype For Business Server 2019 and 1 more 2026-09-16 6.5 Medium
Improper neutralization of input during web page generation ('cross-site scripting') in Skype for Business allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-89157 1 Pcre 1 Pcre2 2026-09-16 5.7 Medium
PCRE2 before 10.48, on 32-bit platforms, has a pcre2_pattern_convert out-of-bounds write when an attacker can provide a large pattern.
CVE-2026-66308 1 Microsoft 4 Skype For Business Server, Skype For Business Server 2015, Skype For Business Server 2019 and 1 more 2026-09-16 6.5 Medium
Out-of-bounds read in Skype for Business allows an authorized attacker to deny service over a network.
CVE-2026-66307 1 Microsoft 4 Skype For Business Server, Skype For Business Server 2015, Skype For Business Server 2019 and 1 more 2026-09-16 7.5 High
Integer underflow (wrap or wraparound) in Skype for Business allows an unauthorized attacker to deny service over a network.
CVE-2026-66306 1 Microsoft 4 Skype For Business Server, Skype For Business Server 2015, Skype For Business Server 2019 and 1 more 2026-09-16 6.5 Medium
Generation of error message containing sensitive information in Skype for Business allows an unauthorized attacker to disclose information over a network.
CVE-2026-66305 1 Microsoft 4 Skype For Business Server, Skype For Business Server 2015, Skype For Business Server 2019 and 1 more 2026-09-16 7.1 High
Use of client-side authentication in Skype for Business allows an authorized attacker to perform spoofing over a network.
CVE-2026-89158 1 Pcre 1 Pcre2 2026-09-16 6.5 Medium
PCRE2 before 10.48, on 32-bit platforms, has a pcre2_compile_32 integer overflow and resultant out-of-bounds write.
CVE-2026-66304 1 Microsoft 4 Skype For Business Server, Skype For Business Server 2015, Skype For Business Server 2019 and 1 more 2026-09-16 7.5 High
Server-side request forgery (ssrf) in Skype for Business allows an unauthorized attacker to disclose information over a network.