104,345 indexed
CVECVE vulnerabilities
104,345 CVEs indexed — newest first. Filter by CVSS severity or CISA KEV listing; KEV-flagged entries surface a rose pill. Authored by Adam Lundqvist.
Showing 10,251–10,300 of 104,345 · page 206 of 2087
| ID | Title | Summary |
|---|---|---|
| CVE-2026-83664 | CVE-2026-83664 CVSS 5.5 | Access of resource using incompatible type ('type confusion') in Windows Portable Device File System Driver allows an authorized attacker to disclose informati… |
| CVE-2026-83663 | CVE-2026-83663 | Uncontrolled Recursion vulnerability in Apache Thrift go bindings. Both Go transports satisfy a read out of a buffered frame and, when that frame yields no … |
| CVE-2026-83662 | CVE-2026-83662 CVSS 9.3 | Adobe Experience Manager is affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this vulnerability to inject malicious … |
| CVE-2026-83661 | CVE-2026-83661 CVSS 7.8 | Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current us… |
| CVE-2026-83660 | CVE-2026-83660 CVSS 9.9adobe | Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this … |
| CVE-2026-83659 | CVE-2026-83659 CVSS 7.8 | Improper link resolution before file access ('link following') in Windows User Profile Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83658 | CVE-2026-83658 CVSS 5.5 | Improper access control in Windows Error Reporting allows an authorized attacker to disclose information locally. |
| CVE-2026-83657 | CVE-2026-83657 CVSS 5.5 | Weak authentication in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally. |
| CVE-2026-83656 | CVE-2026-83656 CVSS 4.7 | Missing authentication for critical function in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally. |
| CVE-2026-83655 | CVE-2026-83655 CVSS 7.5 | Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to deny service over a network. |
| CVE-2026-83654 | CVE-2026-83654 CVSS 7.8 | Missing authentication for critical function in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83652 | CVE-2026-83652 CVSS 7.8 | Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83651 | CVE-2026-83651 CVSS 6.5 | Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-83650 | CVE-2026-83650 CVSS 7.8 | Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges locally. |
| CVE-2026-8365 | CVE-2026-8365 CVSS 8.8 | The Blocksy theme for WordPress is vulnerable to PHP Object Injection leading to Remote Code Execution via the 'blocksy_meta' REST API field and the V200 datab… |
| CVE-2026-83649 | CVE-2026-83649 CVSS 6.5 | Out-of-bounds read in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to deny service over a network. |
| CVE-2026-83648 | CVE-2026-83648 CVSS 6.5 | Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network. |
| CVE-2026-83647 | CVE-2026-83647 CVSS 7.5 | Out-of-bounds read in Active Directory Domain Services allows an unauthorized attacker to deny service over a network. |
| CVE-2026-83646 | CVE-2026-83646 CVSS 4.8 | Url redirection to untrusted site ('open redirect') in Active Directory Federation Services (AD FS) allows an authorized attacker to perform spoofing over a ne… |
| CVE-2026-83645 | CVE-2026-83645 CVSS 7.5 | Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a net… |
| CVE-2026-83644 | CVE-2026-83644 CVSS 7.0 | Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83643 | CVE-2026-83643 CVSS 8.8 | Stack-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network. |
| CVE-2026-83642 | CVE-2026-83642 CVSS 8.8microsoft | Access of resource using incompatible type ('type confusion') in DNS Server allows an unauthorized attacker to execute code over a network. |
| CVE-2026-83641 | CVE-2026-83641 CVSS 7.8 | Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83640 | CVE-2026-83640 CVSS 7.8 | Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally. |
| CVE-2026-83639 | CVE-2026-83639 CVSS 7.8 | Heap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83638 | CVE-2026-83638 CVSS 7.8 | Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83637 | CVE-2026-83637 CVSS 7.8 | Out-of-bounds read in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83636 | CVE-2026-83636 CVSS 6.5 | Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally. |
| CVE-2026-83635 | CVE-2026-83635 CVSS 7.5microsoft | Out-of-bounds read in DNS Server allows an unauthorized attacker to deny service over a network. |
| CVE-2026-83634 | CVE-2026-83634 CVSS 7.8 | Double free in Windows BitLocker allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83632 | CVE-2026-83632 | Allocation of resources without limits or throttling, Integer overflow or wraparound, Heap-based buffer overflow vulnerability in Apache Thrift. This issue … |
| CVE-2026-83628 | CVE-2026-83628 CVSS 4.3 | The Theme My Login plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 7.1.15 on Multisite installations. This is due… |
| CVE-2026-83627 | CVE-2026-83627 CVSS 9.8 | The Hummingbird – Speed Optimization, Caching, Minify, Compress & CDN plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and in… |
| CVE-2026-83625 | CVE-2026-83625 CVSS 7.2 | The Contact Form by Supsystic plugin for WordPress is vulnerable to Stored Cross-Site Scripting via IP Address Header in all versions up to, and including, 1.1… |
| CVE-2026-83621 | CVE-2026-83621 CVSS 8.1 | ntopng is a web-based network traffic monitoring application. Prior to 6.7.260717, POST /lua/rest/v2/edit/system/edit_blacklist.lua in scripts/lua/rest/v2/edit… |
| CVE-2026-83619 | CVE-2026-83619 | xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. From 0.7.0 until 0.8.15, the release-0.8.x parser in … |
| CVE-2026-83618 | CVE-2026-83618 | xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. From 0.9.10 until 0.9.12, the requireWellFormed: true… |
| CVE-2026-83617 | CVE-2026-83617 | xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. From 0.9.11 until 0.9.12, the requireWellFormed: true… |
| CVE-2026-83616 | CVE-2026-83616 | xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. Prior to @xmldom/xmldom versions 0.8.15 and 0.9.12, a… |
| CVE-2026-83615 | CVE-2026-83615 | xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. Prior to @xmldom/xmldom versions 0.8.15 and 0.9.12, a… |
| CVE-2026-83614 | CVE-2026-83614 | xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. Prior to @xmldom/xmldom versions 0.8.15 and 0.9.12, a… |
| CVE-2026-83613 | CVE-2026-83613 | xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. Prior to @xmldom/xmldom versions 0.8.15 and 0.9.12, a… |
| CVE-2026-83612 | CVE-2026-83612 | xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. From 0.9.0-beta.1 until 0.9.12, HTML-mode parsing thr… |
| CVE-2026-83611 | CVE-2026-83611 | xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. Prior to @xmldom/xmldom versions 0.8.15 and 0.9.12, a… |
| CVE-2026-83610 | CVE-2026-83610 | xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. Prior to @xmldom/xmldom versions 0.8.15 and 0.9.12, a… |
| CVE-2026-83609 | CVE-2026-83609 | xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. From 0.9.0 until 0.9.12, the shared reg() builder in … |
| CVE-2026-83608 | CVE-2026-83608 | xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. Prior to @xmldom/xmldom versions 0.8.15 and 0.9.12, a… |
| CVE-2026-83607 | CVE-2026-83607 | xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. Prior to @xmldom/xmldom versions 0.8.14 and 0.9.11, a… |
| CVE-2026-83606 | CVE-2026-83606 | xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. From 0.9.0-beta.9 until 0.9.11, the processing-instru… |