Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (100173 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-68189 1 Linux 1 Linux Kernel 2026-08-19 7.8 High
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: Protect UUID list traversal The hci_sync conversion moved class-of-device and EIR generation from an HCI request built under hdev->lock to asynchronous command sync work. The worker holds hdev->req_lock, but that lock does not serialize access to hdev->uuids against add_uuid() and remove_uuid(), which update the list under hdev->lock. The following interleaving can therefore occur: CPU0 (command sync work) CPU1 (management socket) fetch uuid from the list list_del(&uuid->list) kfree(uuid) read uuid->size KASAN reports the resulting use-after-free: BUG: KASAN: slab-use-after-free in eir_create+0xb8f/0xee0 Read of size 1 at addr ffff88810dbd8620 by task kworker/u17:0/87 Workqueue: hci0 hci_cmd_sync_work Call Trace: eir_create+0xb8f/0xee0 hci_update_eir_sync+0x1c0/0x330 hci_cmd_sync_work+0x13c/0x290 process_one_work+0x63a/0x1070 worker_thread+0x45b/0xd10 Allocated by task 86: __kasan_kmalloc+0x8f/0xa0 add_uuid+0x18a/0x4b0 hci_sock_sendmsg+0x1033/0x1ea0 Freed by task 92: __kasan_slab_free+0x43/0x70 kfree+0x131/0x3c0 remove_uuid+0x25e/0x560 hci_sock_sendmsg+0x1033/0x1ea0 Hold hdev->lock while generating and committing the class-of-device and EIR snapshots. Release it before sending an HCI command, so controller waits do not happen under the device lock. This protects all UUID list walks in these paths and restores the serialization lost in the command sync conversion.
CVE-2021-27085 1 Microsoft 7 Internet Explorer, Windows 10 1803, Windows 10 1809 and 4 more 2026-08-19 8.8 High
Internet Explorer Remote Code Execution Vulnerability
CVE-2021-27084 1 Microsoft 2 Maven For Java, Visual Studio Code 2026-08-19 7.8 High
Visual Studio Code Java Extension Pack Remote Code Execution Vulnerability
CVE-2021-27076 1 Microsoft 6 Business Productivity Servers, Sharepoint Foundation, Sharepoint Foundation 2013 and 3 more 2026-08-19 8.8 High
Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2021-27063 1 Microsoft 10 Windows Server 1909, Windows Server 2004, Windows Server 2008 and 7 more 2026-08-19 7.5 High
Windows DNS Server Denial of Service Vulnerability
CVE-2021-27062 1 Microsoft 2 Hevc Video Extensions, High Efficiency Video Coding 2026-08-19 7.8 High
HEVC Video Extensions Remote Code Execution Vulnerability
CVE-2021-27061 1 Microsoft 2 Hevc Video Extensions, High Efficiency Video Coding 2026-08-19 7.8 High
HEVC Video Extensions Remote Code Execution Vulnerability
CVE-2021-27058 1 Microsoft 1 365 Apps 2026-08-19 7.8 High
Microsoft Office ClickToRun Remote Code Execution Vulnerability
CVE-2021-27057 1 Microsoft 11 365 Apps, Excel, Excel 2013 and 8 more 2026-08-19 7.8 High
Microsoft Office Remote Code Execution Vulnerability
CVE-2021-27056 1 Microsoft 6 365 Apps, Office, Office 2019 and 3 more 2026-08-19 7.8 High
Microsoft PowerPoint Remote Code Execution Vulnerability
CVE-2021-27055 1 Microsoft 6 365 Apps, Office, Office 2019 and 3 more 2026-08-19 7 High
Microsoft Visio Security Feature Bypass Vulnerability
CVE-2021-27054 1 Microsoft 11 365 Apps, Excel, Excel 2013 and 8 more 2026-08-19 7.8 High
Microsoft Excel Remote Code Execution Vulnerability
CVE-2021-27053 1 Microsoft 9 365 Apps, Excel, Excel 2013 and 6 more 2026-08-19 7.8 High
Microsoft Excel Remote Code Execution Vulnerability
CVE-2021-27051 1 Microsoft 2 Hevc Video Extensions, High Efficiency Video Coding 2026-08-19 7.8 High
HEVC Video Extensions Remote Code Execution Vulnerability
CVE-2021-27050 1 Microsoft 2 Hevc Video Extensions, High Efficiency Video Coding 2026-08-19 7.8 High
HEVC Video Extensions Remote Code Execution Vulnerability
CVE-2021-27049 1 Microsoft 2 Hevc Video Extensions, High Efficiency Video Coding 2026-08-19 7.8 High
HEVC Video Extensions Remote Code Execution Vulnerability
CVE-2021-27048 1 Microsoft 2 Hevc Video Extensions, High Efficiency Video Coding 2026-08-19 7.8 High
HEVC Video Extensions Remote Code Execution Vulnerability
CVE-2021-27047 1 Microsoft 2 Hevc Video Extensions, High Efficiency Video Coding 2026-08-19 7.8 High
HEVC Video Extensions Remote Code Execution Vulnerability
CVE-2021-26902 1 Microsoft 2 Hevc Video Extensions, High Efficiency Video Coding 2026-08-19 7.8 High
HEVC Video Extensions Remote Code Execution Vulnerability
CVE-2021-26901 1 Microsoft 19 Windows 10, Windows 10 1507, Windows 10 1607 and 16 more 2026-08-19 7.8 High
Windows Event Tracing Elevation of Privilege Vulnerability