Export limit exceeded: 30292 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (30292 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-116943 1 Microsoft 8 Microsoft Sql Server 2017 For X64-based Systems \(cu31\), Microsoft Sql Server 2019 For X64-based Systems \(cu32\), Microsoft Sql Server 2022 For X64-based Systems \(cu27\) and 5 more 2026-11-11 7.5 High
Buffer over-read in SQL Server allows an unauthorized attacker to disclose information over a network.
CVE-2026-116945 1 Microsoft 8 Microsoft Sql Server 2017 For X64-based Systems \(cu31\), Microsoft Sql Server 2019 For X64-based Systems \(cu32\), Microsoft Sql Server 2022 For X64-based Systems \(cu27\) and 5 more 2026-11-11 9.8 Critical
Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.
CVE-2026-116947 1 Microsoft 8 Microsoft Sql Server 2017 For X64-based Systems \(cu31\), Microsoft Sql Server 2019 For X64-based Systems \(cu32\), Microsoft Sql Server 2022 For X64-based Systems \(cu27\) and 5 more 2026-11-11 7.5 High
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-105552 1 Microsoft 20 Windows 10 1809, Windows 10 21h2, Windows 10 21h2 and 17 more 2026-11-11 5.5 Medium
An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory. To exploit this vulnerability, an authenticated attacker could run a specially crafted application. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system. The update addresses the vulnerability by correcting how the Windows kernel initializes objects in memory.
CVE-2026-105569 1 Microsoft 20 Windows 10 1809, Windows 10 21h2, Windows 10 21h2 and 17 more 2026-11-11 7.8 High
Out-of-bounds read in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-105578 1 Microsoft 23 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 20 more 2026-11-11 7.5 High
Integer overflow or wraparound in Microsoft JScript allows an unauthorized attacker to execute code over a network.
CVE-2026-110051 1 Microsoft 10 365 Apps, Microsoft Office Ltsc 2021, Microsoft Office Ltsc 2024 and 7 more 2026-11-11 6.5 Medium
Incorrect conversion between numeric types in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-110053 1 Microsoft 10 365 Apps, Microsoft Office Ltsc 2021, Microsoft Office Ltsc 2024 and 7 more 2026-11-11 7.5 High
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-110054 1 Microsoft 10 365 Apps, Microsoft Office Ltsc 2021, Microsoft Office Ltsc 2024 and 7 more 2026-11-11 8.8 High
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-110064 1 Microsoft 12 365 Apps, Microsoft 365 Apps For Enterprise, Microsoft Office 365 For Mac and 9 more 2026-11-11 8.8 High
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-114146 1 Microsoft 16 .net 10.0 Installed On Linux, .net 10.0 Installed On Mac Os, .net 10.0 Installed On Windows and 13 more 2026-11-11 9 Critical
Incorrect authorization in ASP.NET Core allows an authorized attacker to elevate privileges over a network.
CVE-2026-114149 1 Microsoft 16 .net 10.0 Installed On Linux, .net 10.0 Installed On Mac Os, .net 10.0 Installed On Windows and 13 more 2026-11-11 7.5 High
Uncontrolled resource consumption in ASP.NET Core allows an unauthorized attacker to deny service over a network.
CVE-2026-114154 1 Microsoft 7 .net 10.0 Installed On Windows, .net 8.0 Installed On Windows, .net 9.0 Installed On Windows and 4 more 2026-11-11 7.5 High
Uncontrolled resource consumption in ASP.NET Core allows an unauthorized attacker to deny service over a network.
CVE-2026-114156 1 Microsoft 4 .net 11.0 Installed On Linux, .net 11.0 Installed On Mac Os, .net 11.0 Installed On Windows and 1 more 2026-11-11 6.5 Medium
Improper input validation in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-114157 1 Microsoft 7 .net 10.0 Installed On Windows, .net 11.0 Installed On Windows, .net 8.0 Installed On Windows and 4 more 2026-11-11 7.5 High
Concurrent execution using shared resource with improper synchronization ('race condition') in ASP.NET Core allows an authorized attacker to elevate privileges locally.
CVE-2026-114159 1 Microsoft 6 .net 10.0 Installed On Windows, .net 11.0 Installed On Windows, .net 8.0 Installed On Windows and 3 more 2026-11-11 8.8 High
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
CVE-2026-110043 1 Microsoft 5 365 Apps, Microsoft Office Ltsc 2021, Microsoft Office Ltsc 2024 and 2 more 2026-11-11 8.8 High
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-110057 1 Microsoft 1 Sharepoint Server 2026-11-11 6.5 Medium
Authorization bypass through user-controlled key in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
CVE-2026-111286 1 Microsoft 10 365 Apps, Microsoft Office Ltsc 2021, Microsoft Office Ltsc 2024 and 7 more 2026-11-11 7.5 High
Use after free in Microsoft Office allows an unauthorized attacker to execute code over a network.
CVE-2026-111287 1 Microsoft 10 365 Apps, Microsoft Office Ltsc 2021, Microsoft Office Ltsc 2024 and 7 more 2026-11-11 7.5 High
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.