Export limit exceeded: 414399 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (414399 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-108473 | 2026-10-14 | N/A | ||
| Multiple Kasa devices contain an improper authentication vulnerability in the local device-management protocol. An unauthenticated adjacent attacker may send management instructions to an affected device without adequate authentication or authorization, allowing modification of the device state or management settings. Under certain usage conditions involving interaction between the user, mobile application, and device-cloud service, insufficient protection of account-related communications may also expose account information. Successful exploitation may allow an unauthenticated adjacent-network attacker to perform unauthorized device-management actions and disrupt legitimate user control. Under certain conditions, account-related information may also be exposed, potentially leading to compromise of the associated cloud account. | ||||
| CVE-2026-105726 | 1 Microsoft | 1 Defender For Endpoint | 2026-10-13 | 5.5 Medium |
| Out-of-bounds read in Microsoft Defender allows an authorized attacker to disclose information locally. | ||||
| CVE-2026-105731 | 1 Microsoft | 1 Office | 2026-10-13 | 5.5 Medium |
| Use of uninitialized resource in Microsoft Graphics Component allows an authorized attacker to disclose information locally. | ||||
| CVE-2026-108133 | 1 Microsoft | 1 Windows Server 2022 | 2026-10-13 | 7.8 High |
| Release of invalid pointer or reference in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-105729 | 1 Microsoft | 1 Windows Sysinternals Process Monitor | 2026-10-13 | 7.1 High |
| Untrusted pointer dereference in SysInternals allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-109741 | 1 Mozilla | 1 Firefox | 2026-10-13 | 5.4 Medium |
| Use-after-free in the Storage: Bucket File System component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | ||||
| CVE-2026-109751 | 1 Mozilla | 1 Firefox | 2026-10-13 | 4.3 Medium |
| Information disclosure in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | ||||
| CVE-2026-109761 | 1 Mozilla | 1 Firefox | 2026-10-13 | 5.4 Medium |
| Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. | ||||
| CVE-2026-109765 | 1 Mozilla | 1 Firefox | 2026-10-13 | 4.2 Medium |
| Race condition, use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | ||||
| CVE-2026-109767 | 1 Mozilla | 1 Firefox | 2026-10-13 | 4.3 Medium |
| Information disclosure in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | ||||
| CVE-2026-102226 | 1 Microsoft | 1 Dynamics Nav 2018 | 2026-10-13 | 8.8 High |
| Improper limitation of a pathname to a restricted directory ('path traversal') in Dynamics Business Central allows an authorized attacker to elevate privileges over a network. | ||||
| CVE-2026-100214 | 1 Microsoft | 2 Dynamics Nav 2017, Dynamics Nav 2018 | 2026-10-13 | 8.8 High |
| Deserialization of untrusted data in Dynamics Business Central allows an authorized attacker to execute code over a network. | ||||
| CVE-2026-84256 | 1 Openvpn | 1 Openvpn | 2026-10-13 | 8.8 High |
| An argument parsing issue in OpenVPN 2.1_rc10 through 2.6.22 and 2.7_alpha1 through 2.7.7 on Windows allows remote authenticated users to execute arbitrary commands via a crafted certificate subject | ||||
| CVE-2026-100207 | 1 Microsoft | 1 Azure Cyclecloud | 2026-10-13 | 7.3 High |
| Improper neutralization of special elements used in an os command ('os command injection') in Azure CycleCloud allows an authorized attacker to execute code locally. | ||||
| CVE-2026-100205 | 1 Microsoft | 1 Windows Sysinternals Process Monitor | 2026-10-13 | 7.1 High |
| Untrusted pointer dereference in SysInternals allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-96202 | 1 Microsoft | 1 Raw Image Extension | 2026-10-13 | 8.8 High |
| Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-96235 | 1 Microsoft | 3 .net, Microsoft Visual Studio 2026 Version 18.10, Visual Studio 2022 | 2026-10-13 | 8.8 High |
| Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-96232 | 1 Microsoft | 3 .net, Microsoft Visual Studio 2026 Version 18.10, Visual Studio 2022 | 2026-10-13 | 7.5 High |
| Out-of-bounds read in .NET allows an unauthorized attacker to disclose information over a network. | ||||
| CVE-2026-96229 | 1 Microsoft | 3 .net, Microsoft Visual Studio 2026 Version 18.10, Visual Studio 2022 | 2026-10-13 | 6.5 Medium |
| Permissive list of allowed inputs in .NET allows an unauthorized attacker to disclose information over a network. | ||||
| CVE-2026-96206 | 1 Microsoft | 1 Windows Subsystem For Linux | 2026-10-13 | 6.5 Medium |
| Use of uninitialized resource in Windows Subsystem for Linux allows an authorized attacker to disclose information locally. | ||||