Export limit exceeded: 415500 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 415500 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 415500 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Expected end of text, found ':' (at char 32), (line:1, col:33)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (415500 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-108306 1 Tanium 2 End-user-cx, Endpoint Configuration Toolset Solution 2026-10-27 7.8 High
Tanium addressed a local privilege escalation vulnerability in End-User Notifications.
CVE-2026-108302 1 Tanium 1 Comply 2026-10-27 4.3 Medium
Tanium addressed an improper access controls vulnerability in Comply.
CVE-2026-104351 1 Adobe 1 Campaign Classic 2026-10-27 9.9 Critical
Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.
CVE-2026-105781 1 Adobe 1 Campaign Classic 2026-10-27 10 Critical
Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary SQL commands, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue does not require user interaction. Scope is changed.
CVE-2026-105489 1 Adobe 1 Campaign Classic 2026-10-27 9.9 Critical
Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.
CVE-2026-108305 1 Tanium 2 End-user-cx, Endpoint Configuration Toolset Solution 2026-10-27 7.8 High
Tanium addressed a local privilege escalation vulnerability in End-User Notifications.
CVE-2026-108325 1 Tanium 1 Reputation 2026-10-27 6.6 Medium
Tanium addressed an insertion of sensitive information into log file vulnerability in Reputation.
CVE-2026-108316 1 Tanium 1 Tanium Server 2026-10-27 4.3 Medium
Tanium addressed an information disclosure vulnerability in Tanium Server.
CVE-2026-108311 1 Tanium 1 Tanium Server 2026-10-27 2.7 Low
Tanium addressed an insufficient logging vulnerability in Tanium Server.
CVE-2026-105008 1 Microsoft 28 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 25 more 2026-10-27 9 Critical
No cwe for this issue in Windows Schannel allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-102675 2 Electron, Electronjs 2 Electron, Electron 2026-10-27 7.4 High
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 41.10.6, 42.9.2, 43.4.1, and 44.0.0-beta.5, responses served through protocol.registerFileProtocol or protocol.registerHttpProtocol for a custom scheme registered with supportFetchAPI enabled but corsEnabled disabled could remain script-readable across origins. This residual issue completes the remediation for CVE-2026-70604. Applications are affected only when they expose such a scheme and load untrusted content in the same session. Schemes intentionally registered with corsEnabled enabled remain cross-origin readable by design. This issue is fixed in versions 41.10.6, 42.9.2, 43.4.1, and 44.0.0-beta.5.
CVE-2026-113869 1 Mozilla 1 Thunderbird 2026-10-27 5.4 Medium
When Thunderbird asked for a security device password (for example a smartcard PIN or the Primary Password) while decrypting an S/MIME message, the message load could finish or be cancelled while the prompt was open. This freed the message decoder while it was still in use, causing a use-after-free and a potentially exploitable crash. This vulnerability was fixed in Thunderbird 158.0.1 and Thunderbird 153.6.
CVE-2026-118004 1 Mozilla 1 Firefox 2026-10-27 N/A
Incorrect boundary conditions in the CSS Transitions and Animations component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-118002 1 Mozilla 1 Firefox 2026-10-27 N/A
Information disclosure due to race condition in the Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-118000 1 Mozilla 1 Firefox 2026-10-27 N/A
Information disclosure in the Networking: HTTP component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117999 1 Mozilla 1 Firefox 2026-10-27 N/A
Race condition in the IPC component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117998 1 Mozilla 1 Firefox 2026-10-27 N/A
Mitigation bypass in the DOM: Push Subscriptions component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117997 1 Mozilla 1 Firefox 2026-10-27 N/A
Sandbox escape due to use-after-free in the Widget component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117996 1 Mozilla 1 Firefox 2026-10-27 N/A
Incorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117995 1 Mozilla 1 Firefox 2026-10-27 N/A
Privilege escalation in the DOM: UI Events & Focus Handling component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.