Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (21833 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2024-43506 1 Microsoft 24 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 21 more 2026-06-09 7.5 High
BranchCache Denial of Service Vulnerability
CVE-2024-43505 1 Microsoft 6 365 Apps, Office, Office 2019 and 3 more 2026-06-09 7.8 High
Microsoft Office Visio Remote Code Execution Vulnerability
CVE-2024-43504 1 Microsoft 8 365 Apps, Excel, Excel 2016 and 5 more 2026-06-09 7.8 High
Microsoft Excel Remote Code Execution Vulnerability
CVE-2024-43503 1 Microsoft 3 Sharepoint Server, Sharepoint Server 2016, Sharepoint Server 2019 2026-06-09 7.8 High
Microsoft SharePoint Elevation of Privilege Vulnerability
CVE-2024-43502 1 Microsoft 6 Windows 10 1809, Windows 10 21h2, Windows 10 21h2 and 3 more 2026-06-09 7.1 High
Windows Kernel Elevation of Privilege Vulnerability
CVE-2024-43480 2 Linux, Microsoft 2 Linux Kernel, Azure Service Fabric 2026-06-09 6.6 Medium
Azure Service Fabric for Linux Remote Code Execution Vulnerability
CVE-2024-38261 1 Microsoft 10 Windows Server 2008, Windows Server 2008 R2, Windows Server 2008 Sp2 and 7 more 2026-06-09 7.8 High
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVE-2020-17103 1 Microsoft 9 Windows 10, Windows 10 1809, Windows 11 23h2 and 6 more 2026-06-09 7 High
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
CVE-2026-21530 1 Microsoft 35 365 Apps, Office 2016, Office 2019 and 32 more 2026-06-09 6.7 Medium
Double free in Windows Rich Text Edit allows an authorized attacker to elevate privileges locally.
CVE-2026-47287 1 Microsoft 1 Visual Studio Code 2026-06-09 6.5 Medium
Relative path traversal in Visual Studio Code allows an unauthorized attacker to perform tampering over a network.
CVE-2026-47644 1 Microsoft 2 Copilot Chat, Copilot Chat Edge 2026-06-08 6.5 Medium
Improper neutralization of special elements in output used by a downstream component ('injection') in Copilot Chat (Microsoft Edge) allows an unauthorized attacker to disclose information over a network.
CVE-2026-45497 1 Microsoft 2 365 Copilot, Copilot 2026-06-08 7.7 High
Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an authorized attacker to execute code over a network.
CVE-2026-4482 2 Microsoft, Rapid7 2 Windows, Insight Agent 2026-06-08 5.5 Medium
The installer certificate files in the …/bootstrap/common/ssl folder do not seem to have restricted permissions on Windows systems (users have read and execute access). For the client.key file in particular, this could potentially lead to exploits, as this exposes agent identity material to any locally authenticated standard user.
CVE-2026-47655 1 Microsoft 1 Graph 2026-06-06 6.5 Medium
Exposure of sensitive information to an unauthorized actor in Microsoft Graph allows an authorized attacker to disclose information over a network.
CVE-2026-48579 1 Microsoft 1 Exchange Online 2026-06-05 9.1 Critical
Improper authorization in Microsoft Exchange Online allows an unauthorized attacker to disclose information over a network.
CVE-2026-8035 3 Linux, Microsoft, Ni 4 Linux Kernel, Windows, Linux Real-time and 1 more 2026-06-05 7.1 High
Improper input validation in the NI-PAL kernel driver may allow a local authenticated user to cause a denial of service by triggering a crash due to a NULL pointer dereference. This vulnerability affects NI-PAL 26.3.0 and prior versions on Windows and Linux.
CVE-2026-40413 1 Microsoft 30 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 27 more 2026-06-01 7.4 High
Windows TCP/IP Denial of Service Vulnerability
CVE-2026-40401 1 Microsoft 30 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 27 more 2026-06-01 7.1 High
Windows TCP/IP Denial of Service Vulnerability
CVE-2026-40397 1 Microsoft 30 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 27 more 2026-06-01 7.8 High
Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-34336 1 Microsoft 25 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 22 more 2026-06-01 7.8 High
Integer overflow or wraparound in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.