Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (2407 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2013-1340 1 Microsoft 8 Windows 7, Windows 8, Windows Rt and 5 more 2025-04-11 8.4 High
win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT does not properly handle objects in memory, which allows local users to gain privileges via a crafted application, aka "Win32k Dereference Vulnerability."
CVE-2013-1344 1 Microsoft 8 Windows 2003 Server, Windows 7, Windows 8 and 5 more 2025-04-11 N/A
win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT allows local users to gain privileges via a crafted application, aka "Win32k Multiple Fetch Vulnerability," a different vulnerability than CVE-2013-1342, CVE-2013-1343, CVE-2013-3864, and CVE-2013-3865.
CVE-2013-1345 1 Microsoft 8 Windows 7, Windows 8, Windows Rt and 5 more 2025-04-11 N/A
win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT does not properly handle objects in memory, which allows local users to gain privileges via a crafted application, aka "Win32k Vulnerability."
CVE-2013-0089 1 Microsoft 9 Internet Explorer, Windows 7, Windows 8 and 6 more 2025-04-11 N/A
Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer CMarkupBehaviorContext Use After Free Vulnerability."
CVE-2013-3661 1 Microsoft 8 Windows 7, Windows 8, Windows Rt and 5 more 2025-04-11 N/A
The EPATHOBJ::bFlatten function in win32k.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT does not check whether linked-list traversal is continually accessing the same list member, which allows local users to cause a denial of service (infinite traversal) via vectors that trigger a crafted PATHRECORD chain.
CVE-2013-3183 1 Microsoft 6 Windows 7, Windows 8, Windows Rt and 3 more 2025-04-11 N/A
The TCP/IP implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT does not properly perform memory allocation for inbound ICMPv6 packets, which allows remote attackers to cause a denial of service (system hang) via crafted packets, aka "ICMPv6 Vulnerability."
CVE-2013-3129 1 Microsoft 14 .net Framework, Lync, Lync Basic and 11 more 2025-04-11 7.8 High
Microsoft .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, and 4.5; Silverlight 5 before 5.1.20513.0; win32k.sys in the kernel-mode drivers, and GDI+, DirectWrite, and Journal, in Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT; GDI+ in Office 2003 SP3, 2007 SP3, and 2010 SP1; GDI+ in Visual Studio .NET 2003 SP1; and GDI+ in Lync 2010, 2010 Attendee, 2013, and Basic 2013 allow remote attackers to execute arbitrary code via a crafted TrueType Font (TTF) file, aka "TrueType Font Parsing Vulnerability."
CVE-2018-0878 1 Microsoft 7 Windows 10, Windows 7, Windows 8.1 and 4 more 2025-04-04 3.1 Low
Windows Remote Assistance in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an information disclosure vulnerability due to how XML External Entities (XXE) are processed, aka "Windows Remote Assistance Information Disclosure Vulnerability".
CVE-2022-30170 1 Microsoft 21 Windows 10, Windows 10 1507, Windows 10 1607 and 18 more 2025-03-11 7.3 High
Windows Credential Roaming Service Elevation of Privilege Vulnerability
CVE-2022-34734 1 Microsoft 20 Windows 10, Windows 10 1507, Windows 10 1607 and 17 more 2025-03-11 8.8 High
Microsoft ODBC Driver Remote Code Execution Vulnerability
CVE-2022-34733 1 Microsoft 20 Windows 10, Windows 10 1507, Windows 10 1607 and 17 more 2025-03-11 8.8 High
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVE-2022-34732 1 Microsoft 20 Windows 10, Windows 10 1507, Windows 10 1607 and 17 more 2025-03-11 8.8 High
Microsoft ODBC Driver Remote Code Execution Vulnerability
CVE-2022-34731 1 Microsoft 20 Windows 10, Windows 10 1507, Windows 10 1607 and 17 more 2025-03-11 8.8 High
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVE-2022-34730 1 Microsoft 20 Windows 10, Windows 10 1507, Windows 10 1607 and 17 more 2025-03-11 8.8 High
Microsoft ODBC Driver Remote Code Execution Vulnerability
CVE-2022-34729 1 Microsoft 20 Windows 10, Windows 10 1507, Windows 10 1607 and 17 more 2025-03-11 7.8 High
Windows GDI Elevation of Privilege Vulnerability
CVE-2022-34728 1 Microsoft 20 Windows 10, Windows 10 1507, Windows 10 1607 and 17 more 2025-03-11 5.5 Medium
Windows Graphics Component Information Disclosure Vulnerability
CVE-2022-34727 1 Microsoft 20 Windows 10, Windows 10 1507, Windows 10 1607 and 17 more 2025-03-11 8.8 High
Microsoft ODBC Driver Remote Code Execution Vulnerability
CVE-2022-34726 1 Microsoft 20 Windows 10, Windows 10 1507, Windows 10 1607 and 17 more 2025-03-11 8.8 High
Microsoft ODBC Driver Remote Code Execution Vulnerability
CVE-2022-34725 1 Microsoft 18 Windows 10, Windows 10 1507, Windows 10 1607 and 15 more 2025-03-11 7 High
Windows ALPC Elevation of Privilege Vulnerability
CVE-2022-34722 1 Microsoft 20 Windows 10, Windows 10 1507, Windows 10 1607 and 17 more 2025-03-11 9.8 Critical
Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability