Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (10420 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-93586 1 Imagemagick 1 Imagemagick 2026-09-22 2.9 Low
ImageMagick before 7.1.2-31 and before 6.9.13-56 contains a use-after-free vulnerability in the ImagesToBlob method, caused by a pointer that is not updated correctly. Exploitation may result in a limited availability impact (e.g., a crash of the affected process). The issue is fixed in versions 7.1.2-31 and 6.9.13-56.
CVE-2026-69735 1 Microsoft 18 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 15 more 2026-09-22 7 High
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69740 1 Microsoft 8 Windows 11 23h2, Windows 11 23h2, Windows 11 24h2 and 5 more 2026-09-22 8.8 High
Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.
CVE-2026-69757 1 Microsoft 18 Windows 10 1809, Windows 10 21h2, Windows 10 21h2 and 15 more 2026-09-22 7.1 High
Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges over a network.
CVE-2026-69761 1 Microsoft 26 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 23 more 2026-09-22 7.1 High
Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges over a network.
CVE-2026-94055 1 Exim 1 Exim 2026-09-22 3.7 Low
Exim before 4.100.1, when certain non-default TLS settings are used with GnuTLS, has a use-after-free.
CVE-2026-69775 1 Microsoft 4 Windows 11 23h2, Windows 11 23h2, Windows Server 2025 and 1 more 2026-09-22 7.1 High
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges over a network.
CVE-2026-69782 1 Microsoft 8 Windows 10 1607, Windows 10 1809, Windows Server 2012 and 5 more 2026-09-22 8.1 High
Concurrent execution using shared resource with improper synchronization ('race condition') in DNS Server allows an unauthorized attacker to execute code over a network.
CVE-2026-69784 1 Microsoft 12 Windows 10 21h2, Windows 10 21h2, Windows 10 22h2 and 9 more 2026-09-22 8.8 High
Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.
CVE-2026-69791 1 Microsoft 18 Windows 10 1809, Windows 10 21h2, Windows 10 21h2 and 15 more 2026-09-22 7 High
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
CVE-2026-94084 1 Oisf 1 Suricata 2026-09-22 9.4 Critical
Suricata before 8.0.7 has an Http2ThreadMultiBuf use-after-free when a transaction is inspected by rules that use http.response_header with and without a transform.
CVE-2026-8849 1 Rti 1 Connext Professional 2026-09-22 N/A
Use After Free vulnerability in RTI Connext Professional (Security Plugins) allows File Manipulation. This issue affects Connext Professional: from 7.6.0 before 7.7.0.1.
CVE-2026-69652 1 Microsoft 21 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 18 more 2026-09-22 7 High
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-69654 1 Microsoft 21 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 18 more 2026-09-22 7 High
Use after free in Windows Accounts Control allows an authorized attacker to elevate privileges locally.
CVE-2026-69706 1 Microsoft 26 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 23 more 2026-09-22 7.1 High
Use after free in Windows Win32K allows an authorized attacker to elevate privileges over a network.
CVE-2026-69708 1 Microsoft 18 Windows 10 1809, Windows 10 21h2, Windows 10 21h2 and 15 more 2026-09-22 7 High
Use after free in Windows Web Platform Storage allows an authorized attacker to elevate privileges locally.
CVE-2026-69711 1 Microsoft 21 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 18 more 2026-09-22 7 High
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69712 1 Microsoft 12 Windows Server 2012, Windows Server 2012 (server Core Installation), Windows Server 2012 R2 and 9 more 2026-09-22 8.8 High
Use after free in Windows Key Distribution Center allows an authorized attacker to execute code over a network.
CVE-2025-8410 1 Rti 1 Connext Professional 2026-09-22 7.4 High
Use After Free vulnerability in RTI Connext Professional (Security Plugins) allows File Manipulation. This issue affects Connext Professional: from 7.5.0 before 7.6.0.
CVE-2026-69730 1 Microsoft 14 Windows 10 1607, Windows 10 1809, Windows Server 2012 and 11 more 2026-09-22 9.8 Critical
Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.