Export limit exceeded: 409317 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 409317 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Search Results (409317 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-83922 1 Microsoft 17 Windows 10 21h2, Windows 10 21h2, Windows 10 22h2 and 14 more 2026-10-17 7.8 High
Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
CVE-2026-83929 1 Microsoft 26 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 23 more 2026-10-17 8.8 High
Out-of-bounds write in Windows GDI allows an unauthorized attacker to execute code over a network.
CVE-2026-96920 1 Microsoft 23 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 20 more 2026-10-17 7.8 High
Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
CVE-2026-96921 1 Microsoft 28 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 25 more 2026-10-17 5.5 Medium
Access of resource using incompatible type ('type confusion') in Windows Message Queuing Queue Manager allows an authorized attacker to disclose information locally.
CVE-2026-96923 1 Microsoft 28 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 25 more 2026-10-17 7 High
Use after free in Windows Workstation Service allows an authorized attacker to elevate privileges locally.
CVE-2026-96925 1 Microsoft 28 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 25 more 2026-10-17 5.5 Medium
Integer underflow (wrap or wraparound) in Windows NTFS allows an authorized attacker to disclose information locally.
CVE-2026-102015 1 Juniper Networks 2 Junos Os, Junos Os Evolved 2026-10-17 8.8 High
A Heap-based Buffer Overflow vulnerability in the secure-dot1xd process of Juniper Networks on Junos OS and Junos OS Evolved allows an unauthenticated adjacent network attacker to execute code as root or cause a denial of service via an EAPOL frame sent to an 802.1X-authenticated interface.
CVE-2026-102016 1 Juniper Networks 2 Junos Os, Junos Os Evolved 2026-10-17 7.5 High
An Improper Validation of Specified Quantity in Input vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP MVPN peer to cause a denial of service via a BGP MVPN signaling update.
CVE-2026-102017 1 Juniper Networks 2 Junos Os, Junos Os Evolved 2026-10-17 6.5 Medium
An Out-of-bounds Write vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated attacker to cause a routing-plane denial of service via Auto-RP mapping announcements received when Auto-RP mapping is enabled.
CVE-2026-102018 1 Juniper Networks 2 Junos Os, Junos Os Evolved 2026-10-17 6.5 Medium
A NULL Pointer Dereference vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker to cause a denial-of-service condition via a malformed PIM Bidir message.
CVE-2026-102019 1 Juniper Networks 2 Junos Os, Junos Os Evolved 2026-10-17 6.5 Medium
An Improper Validation of Specified Quantity in Input vulnerability in the rpd process of Juniper Networks Junos OS and Junos Evolved allows an unauthenticated adjacent attacker to cause a denial-of-service condition via a malformed RIPv2 message.
CVE-2026-102020 1 Juniper Networks 2 Junos Os, Junos Os Evolved 2026-10-17 7.5 High
A Reachable Assertion vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows an authenticated network-based attacker to cause a denial of service via BGP-LS routing updates.
CVE-2026-102021 1 Juniper Networks 2 Junos Os, Junos Os Evolved 2026-10-17 6.5 Medium
A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent network attacker to cause a denial of service via a crafted RSVP packet when MPLS-TE RSVP processing is enabled. The condition can terminate rpd and disrupt routing protocol sessions.
CVE-2026-102022 1 Juniper Networks 2 Junos Os, Junos Os Evolved 2026-10-17 7.5 High
A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an attacker with access to a configured BGP-LS peer to cause an rpd crash via a crafted BGP-LS Link NLRI advertisements.
CVE-2026-102023 1 Juniper Networks 1 Junos Os Evolved 2026-10-17 7.5 High
A Reachable Assertion vulnerability in fwstatsd of Juniper Networks Junos OS Evolved allows an authenticated network attacker to cause a denial of service via an SNMP firewall-counter MIB query when at least one firewall counter is configured.
CVE-2026-102024 1 Juniper Networks 2 Junos Os, Junos Os Evolved 2026-10-17 7.5 High
An Integer Overflow or Wraparound vulnerability in the routing daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an authenticated BGP peer to cause a denial of service via BGP route updates when extended-nexthop-tunnel is enabled.
CVE-2026-102025 1 Juniper Networks 2 Junos Os, Junos Os Evolved 2026-10-17 7.5 High
A Mismatched Memory Management Routines vulnerability in the routing protocol daemon (rpd) process of Juniper Networks Junos OS and Junos OS Evolved allows an authenticated network-based attacker to cause a denial of service via a BGP route update when extended next-hop tunneling and SRv6 service processing are used.
CVE-2026-102026 1 Juniper Networks 2 Junos Os, Junos Os Evolved 2026-10-17 7.5 High
An Improper Control of a Resource Through its Lifetime vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent eBGP peer to cause a routing-daemon crash via a BGP route update when RIB sharding is enabled.
CVE-2026-102027 1 Juniper Networks 2 Junos Os, Junos Os Evolved 2026-10-17 7.5 High
An Incorrect Calculation of Buffer Size vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a configured eBGP neighbor to cause an rpd crash via BGP labeled-unicast UPDATEs when the affected multipath features are enabled.
CVE-2026-111802 1 Redhat 1 Enterprise Linux 2026-10-16 6.6 Medium
A flaw was found in Nautilus. When a removable drive or disk image is unmounted or ejected, Nautilus prompts the user to empty the trash without verifying whether the trash directory paths are symbolic links. An attacker can exploit this flaw by tricking a user into mounting a crafted storage volume and confirming the prompt to empty the trash, leading to the arbitrary deletion of files accessible to that user.