Latest vulnerabilities
Every new CVE with its exploitation status, public exploits and fixes — from more than 20 public sources, updated hourly.
- Tracked
- 409,353
- Last 24h
- 679
- Critical, 7 days
- 357
- Known exploited
- 1,779
97,596 results · Clear filters · Feed
-
High 7.8
HEVC Video Extensions Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally.
-
High 7.5
.NET Elevation of Privilege Vulnerability
Improper access control in .NET allows an authorized attacker to elevate privileges locally.
-
High 8.8
Windows DNS Remote Code Execution Vulnerability
Deserialization of untrusted data in Windows DNS allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft ODBC Driver Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows ODBC Driver allows an unauthorized attacker to execute code over a network.
-
High 7.8
Windows Kernel Elevation of Privilege Vulnerability
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
-
High 7.0CVE-2026-100204 Public exploit
HEIF Image Extensions Remote Code Execution Vulnerability
Use after free in HEIF Image Extensions allows an unauthorized attacker to execute code locally.
-
High 7.0
Windows Wireless Networking Elevation of Privilege Vulnerability
Use after free in Windows Wireless Networking allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows OLE DB Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows OLE DB allows an authorized attacker to elevate privileges locally.
-
High 7.0
Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability
Null pointer dereference in Microsoft Windows SCSI Class System File allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows DWM Core Library Elevation of Privilege Vulnerability
Release of invalid pointer or reference in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows DWM Core Library Elevation of Privilege Vulnerability
Release of invalid pointer or reference in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
-
High 7.5
pgEdge RAG Server is an API server for retrieval-augmented generation over PostgreSQL content using pgvector. Prior to …
-
High 7.8
pgEdge Control Plane generates pg_hba.conf with trust authentication for local and loopback connections
pgEdge Control Plane is a distributed application for managing and orchestrating Postgres databases across multiple hosts. From 0.1.0 to 0.10.1, generated pg_hba.conf files began with hard-coded trust entries for Unix-socket and loopback connections. Because …
-
High 8.4
Expired pointer dereference in the MigTD's virtio-vsock implementation for the Intel(R) TDX Migration Trust Domain (Mig…
-
High 8.4
Write-what-where condition in the MigTD for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor m…
-
High 8.4
Use of out-of-range pointer offset in the MigTD's virtio-vsock implementation for the Intel(R) TDX Migration Trust Doma…
-
High 8.8
Insufficient granularity of access control in the MigTD v2 policy evaluation engine for the Intel(R) TDX Migration Trus…
-
High 8.7
Out-of-bounds write in the XmlCliCommonDxe for the Intel(R) Server Board D50DNP and Intel(R) Server Board M50FCP within…
-
High 8.7
Improper cleanup on thrown exception in the MigTD's SPDM responder for the Intel(R) TDX Migration Trust Domain (MigTD) …
-
High 8.7
Out-of-bounds write in the XmlCliCommonDxe for the Intel(R) Server Board D50DNP and Intel(R) Server Board M50FCP within…
-
High 8.7
Out-of-bounds write in the XmlCliCommonDxe for the Intel(R) Server Board D50DNP and Intel(R) Server Board M50FCP within…
-
High 8.2
Unintended proxy or intermediary ('confused deputy') in the MigTD signing for the Intel(R) TDX Migration Trust Domain (…
-
High 8.4
Untrusted pointer dereference in the FirmwareWakingVector for the Intel(R) Slim Bootloader within Ring 0: Bare Metal OS…
-
High 7.1
Out-of-bounds read for some Intel(R) Wireless Bluetooth(R) within Ring 0: Kernel may allow a denial of service. Network…
-
High 7.1
Out-of-bounds write for some Intel(R) Wireless Bluetooth(R) within Ring 0: Kernel may allow a denial of service. Networ…
-
High 8.6
Out-of-bounds write in the UEFI firmware for the Intel(R) Slim Bootloader within Ring 0: Bare Metal OS may allow an esc…
-
High 8.6
Integer overflow in the UEFI firmware for the Intel(R) Slim Bootloader within Ring 0: Bare Metal OS may allow an escala…
-
High 8.5
Heap-based buffer overflow for some Intel(R) PROSet Wireless Wi-Fi Software for Windows within Ring 0: Kernel may allow…
-
High 8.6
Stack-based buffer overflow in the UEFI firmware for the Intel(R) Slim Bootloader within Ring 0: Bare Metal OS may allo…
-
High 8.8
Use after free in XML in Google Chrome prior to 157.0.8103.50 allowed a remote attacker to execute arbitrary code insid…
KEV Nov 10, 2026 -
High 8.3
Buffer overflow in Compositing in Google Chrome prior to 157.0.8103.50 allowed a remote attacker who had compromised th…
-
High 8.8
Out of bounds write in GPU in Google Chrome prior to 157.0.8103.50 allowed a remote attacker to potentially execute arb…
-
High 8.8
Type confusion in V8 in Google Chrome prior to 157.0.8103.50 allowed a remote attacker to execute arbitrary code inside…
-
High 7.0
In Kura versions <= 5.6.2, the "Command" file-upload handler at `POST /admin/denali/file/command` extracts a client-sup…
-
High 7.4
In Kura versions <= 5.6.2, `CommandCloudApp.execute()` extracts a caller-supplied ZIP archive into a caller-supplied di…
-
High 8.7
In Eclipse Kura versions 5.4.0 through 5.6.2, the Service Listing V1 REST API read the JSON body of every request into …
-
High 8.6
In Eclipse Kura versions 5.1.0 through 5.6.2, the Configuration REST API v2 (org.eclipse.kura.rest.configuration.provid…
-
High 7.8
apitrace 2.0 through 14.0 Heap Buffer Overflow via SnappyFile::flushReadCache()
apitrace 2.0 through 14.0 contains a heap-based buffer overflow in SnappyFile::flushReadCache() that allows attackers to write past m_compressedCache via an oversized compressed chunk length. Attackers can supply a crafted .trace file whose 4-byte chunk lengt…
-
High 8.8
In Eclipse Kura version 5.0.0 to 5.6.2, the Web Console allocates a new HTTP session for every request to its built-in …
-
High 8.7
Aggregation queries can bypass authentication restrictions in @neo4j/graphql
Missing Authentication for Critical Function in aggregation queries in Neo4j @neo4j/graphql 5.0.0 before 5.12.17 and 7.0.0 before 7.6.8 allows remote attackers to read protected data via GraphQL aggregation queries. Field-level @authentication is not enforced…