Export limit exceeded: 10695 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 26056 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Search Results (26056 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-88268 1 Geovision Inc. 1 Gv-lpclpc2011 2211 2026-09-10 6.5 Medium
GeoVision GV-LPC2211 V1.13 contains an authenticated stack buffer overflow in SSVR fragment reassembly that allows a valid user to crash the SSVR service.
CVE-2026-5946 2 Isc, Redhat 3 Bind, Bind 9, Hummingbird 2026-09-10 7.5 High
Multiple flaws have been identified in `named` related to the handling of DNS messages whose CLASS is not Internet (`IN`) — for example, `CHAOS` or `HESIOD`, or DNS messages that specify meta-classes (`ANY` or `NONE`) in the question section. Specially crafted requests reaching the affected code paths — recursion, dynamic updates (`UPDATE`), zone change notifications (`NOTIFY`), or processing of `IN`-specific record types in non-`IN` data — can cause assertion failures in `named`. This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.48, 9.20.0 through 9.20.22, 9.21.0 through 9.21.21, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.48-S1, and 9.20.9-S1 through 9.20.22-S1.
CVE-2025-54518 1 Amd 11 Epyc 7002 Series Processors, Epyc Embedded 7002 Series Processors, Ryzen 3000 Series Desktop Processors and 8 more 2026-09-10 7.0 High
Improper isolation of shared resources within the CPU operation cache on Zen 2-based products could allow an attacker to corrupt instructions executed at a different privilege level, potentially resulting in privilege escalation.
CVE-2025-25249 2 Fortinet, Siemens 5 Fortios, Fortisase, Fortiswitchmanager and 2 more 2026-09-10 7.4 High
A heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0 through 7.0.17, FortiOS 6.4 all versions, FortiSwitchManager 7.2.0 through 7.2.6, FortiSwitchManager 7.0.0 through 7.0.5 allows attacker to execute unauthorized code or commands via specially crafted packets
CVE-2026-58820 1 Google 1 Android 2026-09-10 7.8 High
In multiple locations, there is a possible memory safety issue due to integer overflow. This could lead to local escalation of privilege with no additional execution privileges required.
CVE-2026-80073 1 Microsoft 8 365 Apps, Microsoft Office Ltsc 2021, Microsoft Office Ltsc 2024 and 5 more 2026-09-10 6.5 Medium
Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network.
CVE-2026-80085 1 Microsoft 12 365, 365 Apps, Microsoft 365 and 9 more 2026-09-10 8.8 High
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2025-49796 1 Redhat 16 Cert Manager, Discovery, Enterprise Linux and 13 more 2026-09-10 9.1 Critical
A vulnerability was found in libxml2. Processing certain sch:name elements from the input XML file can trigger a memory corruption issue. This flaw allows an attacker to craft a malicious XML input file that can lead libxml to crash, resulting in a denial of service or other possible undefined behavior due to sensitive data being corrupted in memory.
CVE-2026-85103 1 Checkpoint 2 Quantum Security Gateway, Quantum Security Management 2026-09-10 9.8 Critical
A heap-based buffer overflow in VPN certificate ASN.1 decoding may allow an unauthenticated remote attacker to execute arbitrary code on Check Point Quantum Security Management and Quantum Security Gateway systems.
CVE-2026-81395 1 Microsoft 12 365, 365 Apps, Excel and 9 more 2026-09-10 5.5 Medium
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-81959 1 Microsoft 12 365, 365 Apps, Excel and 9 more 2026-09-10 7.8 High
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-78503 1 Microsoft 15 365 Apps, Microsoft 365, Microsoft Office 365 For Mac and 12 more 2026-09-10 6.5 Medium
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-78520 1 Microsoft 13 365, 365 Apps, Microsoft 365 and 10 more 2026-09-10 6.5 Medium
Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-64380 1 Linux 1 Linux Kernel 2026-09-10 8.2 High
In the Linux kernel, the following vulnerability has been resolved: smb: client: harden POSIX SID length parsing posix_info_sid_size() reads sid[1] to obtain the subauthority count, but its existing boundary check still accepts buffers with only one remaining byte. Require two bytes before reading sid[1] so all client paths that reuse the helper reject truncated POSIX SIDs safely.
CVE-2026-79376 1 Bestechnic 1 Bes2300 2026-09-10 8.8 High
An issue in the l2cap_handle_data() function of Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC firmware v3.x and earlier allows attackers to cause a Denial of Service (DoS) via sending a crafted L2CAP packet.
CVE-2026-81957 1 Microsoft 15 365 Apps, Excel, Excel 2016 and 12 more 2026-09-10 7.8 High
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-75438 1 Open5gs 1 Open5gs 2026-09-10 7.5 High
Buffer Overflow vulnerability in Open5GS v2.7.7 allows a remote attacker to cause a denial of service via the ogs_sbi_time_parse() function
CVE-2026-81388 1 Microsoft 18 365, 365 Apps, Excel and 15 more 2026-09-10 7.8 High
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-81393 1 Microsoft 14 365 Apps, Excel, Excel 2016 and 11 more 2026-09-10 5.5 Medium
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-78512 1 Microsoft 12 365 Apps, Microsoft 365, Microsoft Office Ltsc For Mac 2021 and 9 more 2026-09-10 8.8 High
Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.