Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (105221 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-108448 1 Microsoft 6 365 Apps, Office 2021, Office 2024 and 3 more 2026-10-15 7.5 High
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-108447 1 Microsoft 3 365 Apps, Office 2021, Office 2024 2026-10-15 8.8 High
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-108446 1 Microsoft 6 365 Apps, Office 2021, Office 2024 and 3 more 2026-10-15 8.8 High
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-108445 1 Microsoft 6 365 Apps, Office 2021, Office 2024 and 3 more 2026-10-15 8.8 High
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-108443 1 Microsoft 6 365 Apps, Office 2021, Office 2024 and 3 more 2026-10-15 8.8 High
Off-by-one error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-108442 1 Microsoft 6 365 Apps, Office 2021, Office 2024 and 3 more 2026-10-15 8.8 High
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-108441 1 Microsoft 6 365 Apps, Office 2021, Office 2024 and 3 more 2026-10-15 8.8 High
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-108440 1 Microsoft 6 365 Apps, Office 2021, Office 2024 and 3 more 2026-10-15 8.8 High
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-108439 1 Microsoft 6 365 Apps, Office 2021, Office 2024 and 3 more 2026-10-15 8.8 High
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-108437 1 Microsoft 3 365 Apps, Office 2021, Office 2024 2026-10-15 8.8 High
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-108433 1 Microsoft 6 365 Apps, Office 2021, Office 2024 and 3 more 2026-10-15 7.8 High
Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally.
CVE-2026-108432 1 Microsoft 6 365 Apps, Office 2021, Office 2024 and 3 more 2026-10-15 8.8 High
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-108431 1 Microsoft 6 365 Apps, Office 2021, Office 2024 and 3 more 2026-10-15 8.8 High
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-108430 1 Microsoft 6 365 Apps, Office 2021, Office 2024 and 3 more 2026-10-15 8.8 High
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-108429 1 Microsoft 3 365 Apps, Office 2021, Office 2024 2026-10-15 8.8 High
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-108428 1 Microsoft 3 365 Apps, Office 2021, Office 2024 2026-10-15 8.8 High
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-108427 1 Microsoft 3 365 Apps, Office 2021, Office 2024 2026-10-15 8.8 High
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-108426 1 Microsoft 3 365 Apps, Office 2021, Office 2024 2026-10-15 8.8 High
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-111357 1 Ivanti 1 Connect Secure 2026-10-15 7 High
Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, leading to privilege escalation to root, as exploited in the wild in October 2026.
CVE-2026-105040 2026-10-15 8.8 High
The EnergizeLab Eilik NestJS auth service accepts a user-controlled user ID in account update requests (mass assignment). A registered user can set another account's identifier and take over that account.