Export limit exceeded: 380896 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (2881 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2021-26432 1 Microsoft 15 Windows 10, Windows 10 1507, Windows 10 1607 and 12 more 2026-08-10 9.8 Critical
Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability
CVE-2021-34535 1 Microsoft 18 Remote Desktop, Remote Desktop Client, Windows 10 and 15 more 2026-08-10 8.8 High
Remote Desktop Client Remote Code Execution Vulnerability
CVE-2021-34484 1 Microsoft 22 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 19 more 2026-08-10 7.8 High
Windows User Profile Service Elevation of Privilege Vulnerability
CVE-2021-34483 1 Microsoft 19 Windows 10, Windows 10 1507, Windows 10 1607 and 16 more 2026-08-10 7.8 High
Windows Print Spooler Elevation of Privilege Vulnerability
CVE-2021-34533 1 Microsoft 19 Windows 10, Windows 10 1507, Windows 10 1607 and 16 more 2026-08-10 7.8 High
Windows Graphics Component Font Parsing Remote Code Execution Vulnerability
CVE-2021-36958 1 Microsoft 17 Windows, Windows 10 1507, Windows 10 1607 and 14 more 2026-08-10 7.8 High
A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.
CVE-2021-36947 1 Microsoft 19 Windows 10, Windows 10 1507, Windows 10 1607 and 16 more 2026-08-10 8.8 High
Windows Print Spooler Remote Code Execution Vulnerability
CVE-2021-36937 1 Microsoft 19 Windows 10, Windows 10 1507, Windows 10 1607 and 16 more 2026-08-10 7.8 High
Windows Media MPEG-4 Video Decoder Remote Code Execution Vulnerability
CVE-2021-36936 1 Microsoft 19 Windows 10, Windows 10 1507, Windows 10 1607 and 16 more 2026-08-10 8.8 High
Windows Print Spooler Remote Code Execution Vulnerability
CVE-2021-26426 1 Microsoft 16 Windows 10, Windows 10 1507, Windows 10 1607 and 13 more 2026-08-10 7 High
Windows User Account Profile Picture Elevation of Privilege Vulnerability
CVE-2021-26425 1 Microsoft 19 Windows 10, Windows 10 1507, Windows 10 1607 and 16 more 2026-08-10 7.8 High
Windows Event Tracing Elevation of Privilege Vulnerability
CVE-2021-26424 1 Microsoft 19 Windows 10, Windows 10 1507, Windows 10 1607 and 16 more 2026-08-10 9.9 Critical
Windows TCP/IP Remote Code Execution Vulnerability
CVE-2021-34537 1 Microsoft 18 Windows 10, Windows 10 1507, Windows 10 1607 and 15 more 2026-08-10 7.8 High
Windows Bluetooth Driver Elevation of Privilege Vulnerability
CVE-2021-34480 1 Microsoft 16 Windows 10, Windows 10 1507, Windows 10 1607 and 13 more 2026-08-10 6.8 Medium
Scripting Engine Memory Corruption Vulnerability
CVE-2022-30190 1 Microsoft 23 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 20 more 2026-08-05 7.8 High
A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully exploits this vulnerability can run arbitrary code with the privileges of the calling application. The attacker can then install programs, view, change, or delete data, or create new accounts in the context allowed by the user’s rights. Please see the MSRC Blog Entry for important information about steps you can take to protect your system from this vulnerability.
CVE-2018-3639 12 Arm, Canonical, Debian and 9 more 330 Cortex-a, Ubuntu Linux, Debian Linux and 327 more 2026-05-29 5.5 Medium
Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis, aka Speculative Store Bypass (SSB), Variant 4.
CVE-2022-26926 1 Microsoft 23 Windows 10, Windows 10 1507, Windows 10 1607 and 20 more 2026-05-27 7.8 High
Windows Address Book Remote Code Execution Vulnerability
CVE-2022-41089 1 Microsoft 16 .net, .net Core, .net Framework and 13 more 2026-05-27 7.8 High
.NET Framework Remote Code Execution Vulnerability
CVE-2022-26934 1 Microsoft 28 365 Apps, Office, Office Long Term Servicing Channel and 25 more 2026-05-19 6.5 Medium
Windows Graphics Component Information Disclosure Vulnerability
CVE-2014-4113 1 Microsoft 9 Windows 7, Windows 8, Windows 8.1 and 6 more 2026-04-22 7.8 High
win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges via a crafted application, as exploited in the wild in October 2014, aka "Win32k.sys Elevation of Privilege Vulnerability."