110,684 indexed
CVECVE vulnerabilities
110,684 CVEs indexed — newest first. Filter by CVSS severity or CISA KEV listing; KEV-flagged entries surface a rose pill. Authored by Adam Lundqvist.
Showing 12,151–12,200 of 110,684 · page 244 of 2214
| ID | Title | Summary |
|---|---|---|
| CVE-2026-81987 | CVE-2026-81987 CVSS 7.8adobe | Acrobat Reader is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user.… |
| CVE-2026-81986 | CVE-2026-81986 CVSS 7.8adobe | Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of … |
| CVE-2026-81985 | CVE-2026-81985 CVSS 7.8adobe | Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of … |
| CVE-2026-81984 | CVE-2026-81984 CVSS 5.5adobe | Acrobat Reader is affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability t… |
| CVE-2026-81983 | CVE-2026-81983 CVSS 7.8adobe | Acrobat Reader is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitati… |
| CVE-2026-81982 | CVE-2026-81982 CVSS 5.5adobe | Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerabil… |
| CVE-2026-81981 | CVE-2026-81981 CVSS 7.8adobe | Acrobat Reader is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitati… |
| CVE-2026-81980 | CVE-2026-81980 CVSS 7.8adobe | Acrobat Reader is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitati… |
| CVE-2026-8198 | CVE-2026-8198 CVSS 5.3 | The Activity Logs, User Activity Tracking, Multisite Activity Log from Logtivity plugin for WordPress is vulnerable to Authentication Bypass to Information Dis… |
| CVE-2026-81979 | CVE-2026-81979 CVSS 7.8adobe | Acrobat Reader is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitati… |
| CVE-2026-81978 | CVE-2026-81978 CVSS 5.5adobe | Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerabil… |
| CVE-2026-81977 | CVE-2026-81977 CVSS 5.5adobe | Acrobat Reader is affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could lead to disclosure of sensitive memory. An attacker could leve… |
| CVE-2026-81976 | CVE-2026-81976 CVSS 7.8adobe | Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of … |
| CVE-2026-81975 | CVE-2026-81975 CVSS 7.8adobe | Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of … |
| CVE-2026-81973 | CVE-2026-81973 CVSS 7.8adobe | Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of … |
| CVE-2026-81971 | CVE-2026-81971 CVSS 7.0 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows NTFS allows an authorized attacker to elevate privileges… |
| CVE-2026-8197 | CVE-2026-8197 CVSS 4.8concretecms | Concrete CMS 9.5.0 and below is vulnerable to Stored XSS via OAuth integration name. The OAuth authorize template renders the integration name (admin-controlle… |
| CVE-2026-81969 | CVE-2026-81969 CVSS 7.8 | Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-81964 | CVE-2026-81964 CVSS 5.5 | Use of hard-coded credentials in Windows Update Orchestrator Service allows an authorized attacker to bypass a security feature locally. |
| CVE-2026-81963 | Microsoft Windows Link Following Vulnerability KEVCVSS 7.8Microsoft | Microsoft Windows Update Stack contains a link following vulnerability that allows a local attacker to escalate privileges locally up to SYSTEM. |
| CVE-2026-81960 | CVE-2026-81960 CVSS 7.8microsoft | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
| CVE-2026-8196 | CVE-2026-8196 CVSS 3.7 | A flaw has been found in JeecgBoot 3.9.1. The impacted element is an unknown function of the file jeecg-module-system/jeecg-system-biz/src/main/java/org/jeecg/… |
| CVE-2026-81959 | CVE-2026-81959 CVSS 7.8microsoft | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
| CVE-2026-81958 | CVE-2026-81958 CVSS 5.5microsoft | Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
| CVE-2026-81957 | CVE-2026-81957 CVSS 7.8microsoft | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
| CVE-2026-81956 | CVE-2026-81956 CVSS 7.8microsoft | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
| CVE-2026-81955 | CVE-2026-81955 CVSS 8.8 | Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network. |
| CVE-2026-81954 | CVE-2026-81954 CVSS 7.8microsoft | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
| CVE-2026-81953 | CVE-2026-81953 CVSS 7.8microsoft | Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
| CVE-2026-81952 | CVE-2026-81952 CVSS 8.8microsoft | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
| CVE-2026-81951 | CVE-2026-81951 CVSS 7.8microsoft | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
| CVE-2026-81950 | CVE-2026-81950 CVSS 7.8microsoft | Double free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
| CVE-2026-8195 | CVE-2026-8195 CVSS 4.3 | A vulnerability was detected in JeecgBoot up to 3.9.1. The affected element is an unknown function of the file jeecg-module-system/jeecg-system-biz/src/main/ja… |
| CVE-2026-81949 | CVE-2026-81949 CVSS 7.8microsoft | Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
| CVE-2026-81948 | CVE-2026-81948 CVSS 7.8microsoft | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
| CVE-2026-81947 | CVE-2026-81947 CVSS 7.8microsoft | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
| CVE-2026-81946 | CVE-2026-81946 CVSS 4.4 | PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 and 2.2412b260519 use MD5-based password hashing, a cryptogra… |
| CVE-2026-81945 | CVE-2026-81945 CVSS 6.6 | PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 and 2.2412b260519 contain a stack-based buffer overflow in th… |
| CVE-2026-81944 | CVE-2026-81944 CVSS 7.5 | PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 and 2.2412b260519 contain a stack-based buffer overflow in th… |
| CVE-2026-81943 | CVE-2026-81943 CVSS 6.7 | PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 and 2.2412b260519 contain active debug functionality in the e… |
| CVE-2026-81942 | CVE-2026-81942 CVSS 8.8 | PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 and 2.2412b260519 contain an OS command injection vulnerabili… |
| CVE-2026-81941 | CVE-2026-81941 CVSS 8.8langflow | IBM Langflow OSS 1.0.0 through 1.11.5 allows an authenticated non-administrative user could execute arbitrary operating system commands on the server at the pr… |
| CVE-2026-81940 | CVE-2026-81940 CVSS 8.8langflow | IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special character… |
| CVE-2026-8194 | CVE-2026-8194 CVSS 4.3 | A security vulnerability has been detected in osTicket up to 1.18.3. Impacted is an unknown function of the file include/class.dispatcher.php of the component … |
| CVE-2026-81939 | CVE-2026-81939 CVSS 9.1 | A Zip Slip vulnerability in the SonicWall Network Security Manager (NSM) On-Prem file upload and archive processing functionality allows an attacker to extract… |
| CVE-2026-81937 | CVE-2026-81937 CVSS 7.2ibm | IBM Guardium Data Protection 12.2 is vulnerable to a command injection vulnerability in the import remotelog_config file CLI command. A highly privileged authe… |
| CVE-2026-81934 | CVE-2026-81934 CVSS 7.1 | Redis contains a use-after-free vulnerability in the 'tlsProcessPendingData()' function, which handles the TLS pending-data list if Redis is configured with TL… |
| CVE-2026-81933 | CVE-2026-81933 CVSS 8.8ibm | IBM Guardium Data Protection 12.2 is vulnerable to a SQL injection vulnerability in the Analytic Grid Service Handler. A low-privileged authenticated user can … |
| CVE-2026-81932 | CVE-2026-81932 CVSS 8.6ibm | IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to SQL injection. A remote unauthenticated attacker could send specially crafted SQL statements… |
| CVE-2026-81931 | CVE-2026-81931 | Unrestricted Upload of File with Dangerous Type in the product photo upload in Roskus Prospero Flow CRM before 5.16.0 allows an authenticated user holding the … |