Export limit exceeded: 26367 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (26367 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2021-34478 | 1 Microsoft | 3 365 Apps, Office, Office 2019 | 2026-08-10 | 7.8 High |
| Microsoft Office Remote Code Execution Vulnerability | ||||
| CVE-2026-3087 | 2 Microsoft, Python | 3 Windows, Cpython, Python | 2026-08-10 | 7.5 High |
| If `shutil.unpack_archive()` is given a ZIP archive with an absolute Windows path containing a drive (`C:\\...`) then the archive will be extracted outside the target directory which is different than other operating systems. Only Windows is affected by this vulnerability. | ||||
| CVE-2026-19171 | 2 Google, Microsoft | 2 Chrome, Windows | 2026-08-08 | 9.6 Critical |
| Use after free in Media in Google Chrome on Windows prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High) | ||||
| CVE-2026-19158 | 2 Google, Microsoft | 2 Chrome, Windows | 2026-08-08 | 7.5 High |
| Use after free in Views in Google Chrome on Windows prior to 151.0.7922.109 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) | ||||
| CVE-2024-4944 | 2 Microsoft, Watchguard | 3 Windows, Mobile Vpn With Ssl, Mobile Vpn With Ssl Client | 2026-08-07 | 7.8 High |
| A local privilege escalation vlnerability in the WatchGuard Mobile VPN with SSL client on Windows enables a local user to execute arbitrary commands with elevated privileged. | ||||
| CVE-2026-68823 | 1 Microsoft | 1 Azure Confidential Ledger | 2026-08-07 | 9.1 Critical |
| Exposed dangerous method or function in Azure Confidential Ledger allows an authorized attacker to execute code over a network. | ||||
| CVE-2026-49163 | 1 Microsoft | 1 Application Insights Profiler | 2026-08-07 | 8.8 High |
| Improper limitation of a pathname to a restricted directory ('path traversal') in Application Insights Profiler allows an authorized attacker to elevate privileges over a network. | ||||
| CVE-2026-62836 | 1 Microsoft | 1 Azure Sql Managed Instance | 2026-08-07 | 8.7 High |
| Improper restriction of communication channel to intended endpoints in Azure SQL Managed Instance allows an unauthorized attacker to elevate privileges over a network. | ||||
| CVE-2026-70332 | 1 Microsoft | 1 Sharepoint Online | 2026-08-07 | 9.6 Critical |
| Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network. | ||||
| CVE-2026-19163 | 2 Google, Microsoft | 2 Chrome, Windows | 2026-08-07 | 8.3 High |
| Use after free in Media in Google Chrome on Windows prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High) | ||||
| CVE-2026-63508 | 1 Microsoft | 2 Planetary Computer, Planetary Computer Pro | 2026-08-07 | 10 Critical |
| Missing authentication for critical function in Microsoft Planetary Computer Pro allows an unauthorized attacker to elevate privileges over a network. | ||||
| CVE-2026-50515 | 1 Microsoft | 1 Azure Service Bus | 2026-08-07 | 9.9 Critical |
| Deserialization of untrusted data in Azure Service Bus allows an authorized attacker to execute code over a network. | ||||
| CVE-2026-62830 | 1 Microsoft | 1 Azure Sre Agent | 2026-08-07 | 9.9 Critical |
| Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network. | ||||
| CVE-2026-19139 | 2 Google, Microsoft | 2 Chrome, Windows | 2026-08-07 | 7.4 High |
| Race in CredentialProvider in Google Chrome on Windows prior to 151.0.7922.109 allowed a local attacker to perform OS-level privilege escalation via a malicious file. (Chromium security severity: High) | ||||
| CVE-2026-56162 | 1 Microsoft | 1 Azure Sql Database | 2026-08-07 | 10 Critical |
| Improper authentication in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network. | ||||
| CVE-2026-55031 | 1 Microsoft | 17 365 Apps, Excel, Excel 2016 and 14 more | 2026-08-07 | 7.8 High |
| Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | ||||
| CVE-2026-55029 | 1 Microsoft | 17 365 Apps, Excel, Excel 2016 and 14 more | 2026-08-07 | 7.8 High |
| Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | ||||
| CVE-2026-55047 | 1 Microsoft | 21 365 Apps, Microsoft 365, Microsoft 365 Apps For Enterprise and 18 more | 2026-08-07 | 5.5 Medium |
| Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. | ||||
| CVE-2026-55141 | 1 Microsoft | 17 365 Apps, Excel, Excel 2016 and 14 more | 2026-08-07 | 7.8 High |
| Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | ||||
| CVE-2026-55055 | 1 Microsoft | 21 365 Apps, Microsoft 365, Microsoft 365 Apps For Enterprise and 18 more | 2026-08-07 | 7.8 High |
| Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. | ||||