Search
CVE Explorer
Search the full tracked CVE corpus across every vendor — by keyword, vendor, severity, CVSS band and publication date. Server-rendered; each filtered view has its own URL.
01
Filters
Submit to refine — state is held in the URL.
02
Results
151,186 matching · page 83/3024Each CVE id links to its NVD record.
| CVE | Severity | CVSS | Summary | Published |
|---|---|---|---|---|
| CVE-2026-109428(opens NVD record) | High | 8.8 | Mistral Vibe before 2.25.5 contains a permission validation bypass vulnerability that allows attackers to execute unauthorized commands by exploiting a parsing discrepancy between tree-sitter-bash and bash in handling backslash-newline line continuations in the _extract_commands() function of bash.py. Attackers can craft a command string where tree-sitter-bash extracts only an allowlisted prefix such as cd while bash joins the line continuation into a materially different and hidden command such as a curl request, causing resolve_permission to grant ALWAYS permission while bash executes unauthorized arbitrary commands. | Oct 13, 2026 |
| CVE-2026-108471(opens NVD record) | High | 8.8 | Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-108468(opens NVD record) | High | 7.0 | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-108467(opens NVD record) | High | 8.8 | Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an authorized attacker to execute code over a network. | Oct 13, 2026 |
| CVE-2026-108466(opens NVD record) | Medium | 5.3 | Out-of-bounds read in Windows Kernel allows an unauthorized attacker to deny service over a network. | Oct 13, 2026 |
| CVE-2026-108465(opens NVD record) | High | 7.0 | Use after free in Windows Update Delivery Optimization allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-108464(opens NVD record) | High | 7.0 | Use after free in Software Protection Platform (SPP) allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-108463(opens NVD record) | High | 8.8 | Improper resolution of path equivalence in Windows SmartScreen allows an unauthorized attacker to bypass a security feature over a network. | Oct 13, 2026 |
| CVE-2026-108462(opens NVD record) | Medium | 5.5 | Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally. | Oct 13, 2026 |
| CVE-2026-108461(opens NVD record) | High | 7.0 | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-108460(opens NVD record) | High | 8.1 | Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network. | Oct 13, 2026 |
| CVE-2026-108458(opens NVD record) | High | 8.8 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | Oct 13, 2026 |
| CVE-2026-108457(opens NVD record) | High | 8.1 | Out-of-bounds write in Microsoft Windows PDF allows an unauthorized attacker to execute code over a network. | Oct 13, 2026 |
| CVE-2026-108400(opens NVD record) | High | 8.8 | Integer overflow or wraparound in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network. | Oct 13, 2026 |
| CVE-2026-108399(opens NVD record) | High | 7.2 | Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-108398(opens NVD record) | High | 8.8 | Untrusted search path in .NET Framework allows an authorized attacker to bypass a security feature locally. | Oct 13, 2026 |
| CVE-2026-108396(opens NVD record) | High | 7.0 | Time-of-check time-of-use (toctou) race condition in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-108136(opens NVD record) | High | 7.8 | Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-108135(opens NVD record) | High | 7.0 | Improper link resolution before file access ('link following') in Windows Backup Engine allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-108134(opens NVD record) | High | 7.0 | Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-108133(opens NVD record) | High | 7.8 | Release of invalid pointer or reference in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-108132(opens NVD record) | High | 7.0 | Double free in Windows Kerberos allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-108131(opens NVD record) | High | 7.5 | No cwe for this issue in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network. | Oct 13, 2026 |
| CVE-2026-108130(opens NVD record) | High | 7.8 | Heap-based buffer overflow in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-108129(opens NVD record) | Medium | 6.5 | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | Oct 13, 2026 |
| CVE-2026-108128(opens NVD record) | Medium | 6.5 | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | Oct 13, 2026 |
| CVE-2026-108127(opens NVD record) | Medium | 6.5 | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | Oct 13, 2026 |
| CVE-2026-107607(opens NVD record) | Medium | 6.2 | SWIFI-SE2KIC firmware versions 2.0.22 and prior are vulnerable to a Missing Authentication for Critical Function vulnerability that could allow an attacker on the local network to access a real-time video stream without authentication. | Oct 13, 2026 |
| CVE-2026-107606(opens NVD record) | Medium | 6.2 | SWIFI-SE2KIC firmware versions 2.0.22 and prior are vulnerable to a Missing Authentication for Critical Function vulnerability that could allow an attacker on the local network to retrieve a snapshot of the live feed without authentication. | Oct 13, 2026 |
| CVE-2026-107605(opens NVD record) | Medium | 6.2 | SWIFI-SE2KIC firmware versions 2.0.22 and prior are vulnerable to a Missing Authentication for Critical Function vulnerability that could allow an attacker on the local network to view live video feed without authentication. | Oct 13, 2026 |
| CVE-2026-106625(opens NVD record) | High | 7.8 | Adobe Framemaker is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | Oct 13, 2026 |
| CVE-2026-105733(opens NVD record) | High | 8.8 | Improper access control in Windows Hyper-V allows an authorized attacker to execute code locally. | Oct 13, 2026 |
| CVE-2026-105732(opens NVD record) | High | 7.3 | Stack-based buffer overflow in SysInternals allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-105731(opens NVD record) | Medium | 5.5 | Use of uninitialized resource in Microsoft Graphics Component allows an authorized attacker to disclose information locally. | Oct 13, 2026 |
| CVE-2026-105729(opens NVD record) | High | 7.1 | Untrusted pointer dereference in SysInternals allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-105728(opens NVD record) | High | 7.5 | Improper authentication in Dynamics Business Central allows an unauthorized attacker to disclose information over a network. | Oct 13, 2026 |
| CVE-2026-105727(opens NVD record) | High | 8.8 | Improper limitation of a pathname to a restricted directory ('path traversal') in Dynamics Business Central allows an authorized attacker to elevate privileges over a network. | Oct 13, 2026 |
| CVE-2026-105726(opens NVD record) | Medium | 5.5 | Out-of-bounds read in Microsoft Defender allows an authorized attacker to disclose information locally. | Oct 13, 2026 |
| CVE-2026-105725(opens NVD record) | High | 7.0 | Use after free in Windows Security App allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-105723(opens NVD record) | High | 7.5 | Untrusted pointer dereference in Windows Distributed File System (DFS) allows an unauthorized attacker to elevate privileges over a network. | Oct 13, 2026 |
| CVE-2026-105722(opens NVD record) | High | 7.0 | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-105720(opens NVD record) | Medium | 4.3 | Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. | Oct 13, 2026 |
| CVE-2026-105719(opens NVD record) | Medium | 6.5 | Improper input validation in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network. | Oct 13, 2026 |
| CVE-2026-105718(opens NVD record) | High | 8.8 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | Oct 13, 2026 |
| CVE-2026-105717(opens NVD record) | High | 8.8 | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. | Oct 13, 2026 |
| CVE-2026-105716(opens NVD record) | High | 8.8 | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. | Oct 13, 2026 |
| CVE-2026-105715(opens NVD record) | High | 7.5 | Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | Oct 13, 2026 |
| CVE-2026-105714(opens NVD record) | High | 7.5 | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. | Oct 13, 2026 |
| CVE-2026-105713(opens NVD record) | Medium | 5.7 | Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over an adjacent network. | Oct 13, 2026 |
| CVE-2026-105599(opens NVD record) | High | 7.5 | Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. | Oct 13, 2026 |