Export limit exceeded: 425047 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 425047 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 425047 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 111027 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (111027 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-110151 1 Google 1 Chrome 2026-10-14 8.8 High
Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-88064 2 Backstage, Linuxfoundation 3 Backstage, Backstage, Backstage Plugin-techdocs-node 2026-10-14 8.8 High
Backstage is an open framework for building developer portals. Prior to 1.14.6 and from 1.15.0 until 1.15.4, the @backstage/plugin-techdocs-node package insufficiently validates mkdocs.yml supplied by an authenticated user who can register or modify a TechDocs source. Unsafe Python YAML tags, markdown_extensions names and configuration, theme options, and extra_templates values can reach the documentation generator and cause unintended code execution. The resulting impact is limited to the files, credentials, network access, and other resources available to the TechDocs backend or build container. This issue is fixed in versions 1.14.6 and 1.15.4.
CVE-2026-110148 1 Google 1 Chrome 2026-10-14 8.8 High
Use after free in SVG in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-110147 1 Google 1 Chrome 2026-10-14 8.8 High
Use after free in PDF in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-105013 1 Microsoft 1 Sharepoint Server 2026-10-14 7.4 High
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-110145 1 Google 1 Chrome 2026-10-14 8.3 High
Use after free in Passwords in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-110140 1 Google 1 Chrome 2026-10-14 8.8 High
Type confusion in V8 in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-110139 1 Google 1 Chrome 2026-10-14 8.8 High
Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-110138 1 Google 1 Chrome 2026-10-14 8.3 High
Use after free in ShapeDetection in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-110137 1 Google 1 Chrome 2026-10-14 8.8 High
Use after free in WebRTC in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-70181 1 Microsoft 3 Asp.net Core, Microsoft Visual Studio 2026 Version 18.10, Visual Studio 2022 2026-10-14 7.5 High
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.
CVE-2026-110155 1 Google 1 Chrome 2026-10-14 8.8 High
Buffer overflow in PDFium in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-110156 2 Apple, Google 2 Macos, Chrome 2026-10-14 8.3 High
Incorrect reference resolution in Extensions in Google Chrome on on Mac prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted Chrome extension. (Chromium security severity: High)
CVE-2026-110157 1 Google 1 Chrome 2026-10-14 8.8 High
Use after free in SVG in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-110158 1 Google 1 Chrome 2026-10-14 8.3 High
Use after free in Passwords in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-108398 1 Microsoft 2 .net, .net Framework 2026-10-14 8.8 High
Untrusted search path in .NET Framework allows an authorized attacker to bypass a security feature locally.
CVE-2026-69370 1 Microsoft 1 Visual Studio Code 2026-10-14 8.8 High
Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unauthorized attacker to execute code over a network.
CVE-2026-105728 1 Microsoft 1 Dynamics Nav 2018 2026-10-14 7.5 High
Improper authentication in Dynamics Business Central allows an unauthorized attacker to disclose information over a network.
CVE-2026-110162 1 Google 1 Chrome 2026-10-14 8.8 High
Use after free in Desktop in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-110163 1 Google 1 Chrome 2026-10-14 8.8 High
Use after free in DOM in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)