112,666 indexed
CVECVE vulnerabilities
112,666 CVEs indexed — newest first. Filter by CVSS severity or CISA KEV listing; KEV-flagged entries surface a rose pill. Authored by Adam Lundqvist.
Showing 14,151–14,200 of 112,666 · page 284 of 2254
| ID | Title | Summary |
|---|---|---|
| CVE-2026-80118 | CVE-2026-80118 CVSS 7.1 | PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 1016 contain an unauthenticated physical … |
| CVE-2026-80117 | CVE-2026-80117 CVSS 7.1 | PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 1016 contain a privilege escalation vulne… |
| CVE-2026-80116 | CVE-2026-80116 CVSS 7.8 | PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 1016 contain a privilege escalation vulne… |
| CVE-2026-80115 | CVE-2026-80115 CVSS 6.1 | PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 1016 contain a privilege escalation and d… |
| CVE-2026-80114 | CVE-2026-80114 CVSS 7.8 | PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 1016 contain a hard-coded credentials vul… |
| CVE-2026-80113 | CVE-2026-80113 CVSS 7.1 | PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 1016 contain a privilege escalation vulne… |
| CVE-2026-80112 | CVE-2026-80112 CVSS 7.8 | PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 1016 contain an improper access control v… |
| CVE-2026-80110 | CVE-2026-80110 CVSS 8.1 | A flaw was found in pki-core. The v2 REST ACL filter selects a tie-breaking permission for colliding literal and wildcard ACL keys using lexicographic string c… |
| CVE-2026-80104 | CVE-2026-80104 CVSS 9.8 | DB-GPT builds the destination path for an uploaded skill from the multipart filename without constraining it to the upload directory. skill_upload in packages/… |
| CVE-2026-80101 | CVE-2026-80101 CVSS 4.4gimp | A flaw was found in the file-xwd plugin in GIMP. When processing a specially crafted XWD image file, the plugin validates the image width and bytes-per-line pa… |
| CVE-2026-80099 | CVE-2026-80099 CVSS 8.8 | Several Newfold plugins are vulnerable to Authentication Bypass. The vulnerability exists because the plugins bundle the wp-module-data module. In the module, … |
| CVE-2026-80098 | CVE-2026-80098 CVSS 9.3microsoft | Improper verification of cryptographic signature in Copilot Studio allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-80097 | CVE-2026-80097 CVSS 8.6microsoft | Improper authentication in Microsoft Authenticator allows an unauthorized attacker to elevate privileges locally. |
| CVE-2026-80096 | CVE-2026-80096 CVSS 8.8microsoft | Out-of-bounds read in Windows Remote Desktop Services allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-80093 | CVE-2026-80093 CVSS 7.0microsoft | Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-80092 | CVE-2026-80092 CVSS 5.3 | Authentication bypass by assumed-immutable data in Microsoft Identity Web allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-80091 | CVE-2026-80091 CVSS 6.5microsoft | Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-80090 | CVE-2026-80090 CVSS 6.5microsoft | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-80089 | CVE-2026-80089 CVSS 6.5microsoft | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-80088 | CVE-2026-80088 CVSS 6.5microsoft | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-80087 | CVE-2026-80087 CVSS 6.5microsoft | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-80086 | CVE-2026-80086 CVSS 6.5microsoft | Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-80085 | CVE-2026-80085 CVSS 8.8microsoft | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
| CVE-2026-80084 | CVE-2026-80084 CVSS 6.5microsoft | Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-80083 | CVE-2026-80083 CVSS 8.8microsoft | Untrusted pointer dereference in Windows Hyper-V allows an authorized attacker to execute code locally. |
| CVE-2026-80082 | CVE-2026-80082 CVSS 6.5microsoft | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-80081 | CVE-2026-80081 CVSS 8.8microsoft | Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. |
| CVE-2026-80080 | CVE-2026-80080 CVSS 8.8microsoft | Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
| CVE-2026-80079 | CVE-2026-80079 CVSS 6.5microsoft | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-80078 | CVE-2026-80078 CVSS 6.5microsoft | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-80077 | CVE-2026-80077 CVSS 8.8microsoft | Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
| CVE-2026-80076 | CVE-2026-80076 CVSS 6.5microsoft | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-80075 | CVE-2026-80075 CVSS 7.8microsoft | Heap-based buffer overflow in Windows Work Folders allows an authorized attacker to elevate privileges locally. |
| CVE-2026-80074 | CVE-2026-80074 CVSS 8.8microsoft | Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
| CVE-2026-80073 | CVE-2026-80073 CVSS 6.5microsoft | Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-80072 | CVE-2026-80072 CVSS 4.7 | The User Registration & Membership WordPress plugin before 5.2.8 does not validate the destination of a post-login redirect before redirecting, allowing unaut… |
| CVE-2026-80071 | CVE-2026-80071 CVSS 7.2 | The User Registration & Membership WordPress plugin before 5.2.8 does not properly restrict who may author a membership plan or validate the plan a user attac… |
| CVE-2026-80058 | CVE-2026-80058 CVSS 5.5dell | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Cleartext Storage of Sensitive Inform… |
| CVE-2026-80057 | CVE-2026-80057 CVSS 5.5dell | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Hard-coded Cryptographic Key … |
| CVE-2026-80056 | CVE-2026-80056 CVSS 5.5dell | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Insertion of Sensitive Information i… |
| CVE-2026-80055 | CVE-2026-80055 CVSS 4.4dell | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special E… |
| CVE-2026-80054 | CVE-2026-80054 CVSS 5.5dell | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Incorrect Permission Assignment for … |
| CVE-2026-80051 | CVE-2026-80051 | github.com/graphql-go/graphql (GraphQL for Go) through 0.8.1 does not validate that a scalar variable value matches its declared type. The built-in coerceStrin… |
| CVE-2026-80050 | CVE-2026-80050 CVSS 6.5 | ContiNew Admin fails to apply file-upload permission checks or file-type allowlist validation to multipart upload endpoints, allowing authenticated users to st… |
| CVE-2026-80049 | CVE-2026-80049 CVSS 8.8 | Airbyte Platform resolves the workspace used for its authorization decision from a field the caller supplies. AuthorizationServerHandler copies recognised iden… |
| CVE-2026-80048 | CVE-2026-80048 CVSS 5.5 | A flaw was found in `sssd-kcm`. A local user or process able to connect to the `sssd-kcm` UNIX socket can exploit this vulnerability. By sending a large reques… |
| CVE-2026-80047 | CVE-2026-80047 CVSS 7.8 | A vulnerability in Hugging Face Transformers (versions 4.57.0 to 5.16.1) allows remote Python files to be written to local disk without user consent when using… |
| CVE-2026-8002 | CVE-2026-8002 CVSS 8.8 | Use after free in Audio in Google Chrome on Mac prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML … |
| CVE-2026-8001 | CVE-2026-8001 CVSS 8.3 | Use After Free in Printing in Google Chrome on Linux, Mac, ChromeOS prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process t… |
| CVE-2026-8000 | CVE-2026-8000 CVSS 8.8 | Insufficient validation of untrusted input in ChromeDriver in Google Chrome on Windows prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary co… |