Export limit exceeded: 425854 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (425854 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-96974 | 1 Microsoft | 23 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 20 more | 2026-11-14 | 6.8 Medium |
| Integer overflow or wraparound in HID Parser Library allows an unauthorized attacker to elevate privileges with a physical attack. | ||||
| CVE-2026-96982 | 1 Microsoft | 23 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 20 more | 2026-11-14 | 6.8 Medium |
| Integer overflow or wraparound in HID Parser Library allows an unauthorized attacker to elevate privileges with a physical attack. | ||||
| CVE-2026-97000 | 1 Microsoft | 4 Windows 10 21h2, Windows 10 21h2, Windows 10 22h2 and 1 more | 2026-11-14 | 7 High |
| Null pointer dereference in Windows USM Communication Manager allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-96979 | 1 Microsoft | 23 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 20 more | 2026-11-14 | 6.8 Medium |
| Integer overflow or wraparound in HID Parser Library allows an unauthorized attacker to elevate privileges with a physical attack. | ||||
| CVE-2026-96971 | 1 Microsoft | 23 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 20 more | 2026-11-14 | 7 High |
| Use after free in Windows NetBIOS allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-96983 | 1 Microsoft | 23 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 20 more | 2026-11-14 | 5.3 Medium |
| Use after free in Windows DNS allows an unauthorized attacker to deny service over an adjacent network. | ||||
| CVE-2026-96975 | 1 Microsoft | 7 Windows Server 2016, Windows Server 2016 (server Core Installation), Windows Server 2019 and 4 more | 2026-11-14 | 5.9 Medium |
| Out-of-bounds read in DNS Server allows an unauthorized attacker to deny service over a network. | ||||
| CVE-2026-96980 | 1 Microsoft | 7 Windows Server 2016, Windows Server 2016 (server Core Installation), Windows Server 2019 and 4 more | 2026-11-14 | 4.9 Medium |
| Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network. | ||||
| CVE-2026-97006 | 1 Microsoft | 7 Windows Server 2016, Windows Server 2016 (server Core Installation), Windows Server 2019 and 4 more | 2026-11-14 | 4.9 Medium |
| Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network. | ||||
| CVE-2026-96984 | 1 Microsoft | 7 Windows Server 2016, Windows Server 2016 (server Core Installation), Windows Server 2019 and 4 more | 2026-11-14 | 4.9 Medium |
| Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network. | ||||
| CVE-2026-96985 | 1 Microsoft | 7 Windows Server 2016, Windows Server 2016 (server Core Installation), Windows Server 2019 and 4 more | 2026-11-14 | 4.9 Medium |
| Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network. | ||||
| CVE-2026-113759 | 1 Microsoft | 10 365 Apps, Microsoft Office Ltsc 2021, Microsoft Office Ltsc 2024 and 7 more | 2026-11-14 | 7.8 High |
| Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. | ||||
| CVE-2026-113814 | 1 Microsoft | 12 Windows 11 23h2, Windows 11 23h2, Windows 11 24h2 and 9 more | 2026-11-14 | 8.8 High |
| Untrusted pointer dereference in Windows Storage Spaces Controller allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-70182 | 1 Microsoft | 8 Windows 11 24h2, Windows 11 24h2, Windows 11 25h2 and 5 more | 2026-11-14 | 7.8 High |
| Weak authentication in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-129254 | 1 Opixido | 1 Ocms | 2026-11-14 | 4.3 Medium |
| A flaw has been found in Opixido OCMS up to b7c15660aba83d96677c1a9abaa69c082a24f21c. This impacts an unknown function of the file admin/TUI/index.php of the component Admin TUI. This manipulation of the argument img causes cross site scripting. The attack can be initiated remotely. The exploit has been published and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The vendor was contacted early about this disclosure but did not respond in any way. | ||||
| CVE-2026-107525 | 2026-11-14 | 5.3 Medium | ||
| Dell PowerStore contains an information disclosure vulnerability. An unauthenticated attacker could exploit this vulnerability to obtain service metadata useful for further attacks. | ||||
| CVE-2026-107523 | 1 Dell | 12 Powerstore 1000t, Powerstore 1200t, Powerstore 3000t and 9 more | 2026-11-14 | 8.7 High |
| Dell PowerStore contains an integer overflow vulnerability. An adjacent attacker could exploit it to bypass volume bounds checks, potentially leading to data destruction or denial of service. | ||||
| CVE-2026-105984 | 2026-11-14 | N/A | ||
| The Email Marketing 4Dem WordPress plugin through 2.0.5 does not perform authorization or capability checks on several of its AJAX actions, allowing unauthenticated users to destroy its stored configuration and delete its records. | ||||
| CVE-2026-112753 | 1 Microsoft | 2 Windows 11 26h1, Windows 11 26h1 | 2026-11-14 | 7 High |
| Access of resource using incompatible type ('type confusion') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-112754 | 1 Microsoft | 23 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 20 more | 2026-11-14 | 5.5 Medium |
| Out-of-bounds read in Microsoft Graphics Component allows an unauthorized attacker to disclose information locally. | ||||