96,609 indexed
CVECVE vulnerabilities
96,609 CVEs indexed — newest first. Filter by CVSS severity or CISA KEV listing; KEV-flagged entries surface a rose pill. Authored by Adam Lundqvist.
Showing 6,551–6,600 of 96,609 · page 132 of 1933
| ID | Title | Summary |
|---|---|---|
| CVE-2026-88264 | CVE-2026-88264 CVSS 5.6 | A flaw was found in crun. When the container configuration does not give /dev a dedicated mount, terminal setup can redirect /dev/console onto an attacker-cont… |
| CVE-2026-88263 | CVE-2026-88263 CVSS 7.5 | XikeStor Layer3 switches miss authentication for downloading configuration data. Unauthenticated attacker may retrieve the configuration data containing networ… |
| CVE-2026-88262 | CVE-2026-88262 | Insufficient session expiration vulnerability in bizwell xClick allows Authentication Bypass. This issue affects xClick: R2, R3, and R3.1. |
| CVE-2026-88261 | CVE-2026-88261 | Improper input validation vulnerability in bizwell xClick allows Stored XSS. This issue affects xClick: R2, R3, and R3.1. |
| CVE-2026-88260 | CVE-2026-88260 | Authentication bypass using an alternate path or channel and Improper validation of syntactic correctness of input vulnerability in Brainzcompany Zenius EMS 8.… |
| CVE-2026-88259 | CVE-2026-88259 CVSS 7.5 | CareCam CM2507 IP cameras do not require authentication for access to its network video streaming service. An unauthenticated attacker with network access to t… |
| CVE-2026-88257 | CVE-2026-88257 | Improper Input Validation vulnerability in BeamMCP.Schema in ScriptKittyOS beam_mcp allows an MCP client to reach a tool's dispatch function with arguments tha… |
| CVE-2026-88255 | CVE-2026-88255 | Improper Validation of Unsafe Equivalence in Input in ZenHive mpp allows an unauthenticated remote client to pass the Tempo duplicate-submission gate twice wit… |
| CVE-2026-88252 | CVE-2026-88252 CVSS 4.7 | A flaw was found in sssd. A local user can cause a Denial of Service (DoS) by exhausting the responder service's available file descriptors (system handles use… |
| CVE-2026-8825 | CVE-2026-8825 CVSS 4.9 | The Elementor Website Builder WordPress plugin before 4.1.4 does not properly check user permissions before returning post data through one of its REST endpoi… |
| CVE-2026-8823 | CVE-2026-8823 CVSS 3.8mattermost | Mattermost versions 11.7.x <= 11.7.0, 10.11.x <= 10.11.17 fail to validate bot targets when demoting users to guests which allows a lower-privileged administra… |
| CVE-2026-88226 | CVE-2026-88226 CVSS 4.6 | Out-of-bounds read in Windows Storage Port Driver allows an unauthorized attacker to disclose information with a physical attack. |
| CVE-2026-88219 | CVE-2026-88219 CVSS 8.8 | Untrusted pointer dereference in RPC Runtime allows an unauthorized attacker to execute code over a network. |
| CVE-2026-88210 | CVE-2026-88210 CVSS 7.8 | Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally. |
| CVE-2026-8821 | CVE-2026-8821 CVSS 7.1mattermost | Mattermost versions 11.9.x <= 11.9.0, 11.8.x <= 11.8.4, 11.7.x <= 11.7.7, 10.11.x <= 10.11.22 fail to validate channel member-management permission during play… |
| CVE-2026-88209 | CVE-2026-88209 CVSS 4.6 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform sp… |
| CVE-2026-88208 | CVE-2026-88208 CVSS 4.6 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform sp… |
| CVE-2026-88207 | CVE-2026-88207 CVSS 7.5 | Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. |
| CVE-2026-88206 | CVE-2026-88206 CVSS 7.5 | Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-88204 | CVE-2026-88204 CVSS 7.3 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform sp… |
| CVE-2026-88203 | CVE-2026-88203 CVSS 6.5 | Untrusted pointer dereference in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-88202 | CVE-2026-88202 CVSS 8.8 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
| CVE-2026-88201 | CVE-2026-88201 CVSS 6.5 | Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-88200 | CVE-2026-88200 CVSS 8.8 | Privilege context switching error in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-88198 | CVE-2026-88198 CVSS 8.8 | Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-88197 | CVE-2026-88197 CVSS 8.8 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network. |
| CVE-2026-88196 | CVE-2026-88196 CVSS 8.8 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network. |
| CVE-2026-88195 | CVE-2026-88195 CVSS 6.5 | Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-88194 | CVE-2026-88194 CVSS 7.8 | Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
| CVE-2026-88193 | CVE-2026-88193 CVSS 7.8 | Heap-based buffer overflow in Microsoft Scripting Engine allows an authorized attacker to elevate privileges locally. |
| CVE-2026-88192 | CVE-2026-88192 CVSS 6.5 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-88191 | CVE-2026-88191 CVSS 7.8 | Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locall… |
| CVE-2026-88190 | CVE-2026-88190 CVSS 6.5 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-88189 | CVE-2026-88189 CVSS 7.8 | Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
| CVE-2026-88188 | CVE-2026-88188 CVSS 7.8 | Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
| CVE-2026-88186 | CVE-2026-88186 CVSS 8.8 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
| CVE-2026-88185 | CVE-2026-88185 CVSS 8.1 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
| CVE-2026-88184 | CVE-2026-88184 CVSS 6.5 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-88183 | CVE-2026-88183 CVSS 6.5 | Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-88182 | CVE-2026-88182 CVSS 7.8 | Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
| CVE-2026-88181 | CVE-2026-88181 CVSS 7.8 | Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
| CVE-2026-88180 | CVE-2026-88180 CVSS 7.8 | Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
| CVE-2026-88179 | CVE-2026-88179 CVSS 7.8 | Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
| CVE-2026-88178 | CVE-2026-88178 CVSS 9.8 | Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. |
| CVE-2026-88177 | CVE-2026-88177 CVSS 7.8 | Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
| CVE-2026-88175 | CVE-2026-88175 CVSS 6.5 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-88174 | CVE-2026-88174 CVSS 8.1 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Deployment Services allows an unauthorized attacker to e… |
| CVE-2026-88173 | CVE-2026-88173 CVSS 8.1 | Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network. |
| CVE-2026-88172 | CVE-2026-88172 CVSS 6.5 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-88171 | CVE-2026-88171 CVSS 8.1 | Double free in Windows DHCP Server allows an unauthorized attacker to execute code over a network. |