Search
CVE Explorer
Search the full tracked CVE corpus across every vendor — by keyword, vendor, severity, CVSS band and publication date. Server-rendered; each filtered view has its own URL.
01
Filters
Submit to refine — state is held in the URL.
02
Results
151,186 matching · page 85/3024Each CVE id links to its NVD record.
| CVE | Severity | CVSS | Summary | Published |
|---|---|---|---|---|
| CVE-2026-102866(opens NVD record) | High | 8.1 | Improper verification of cryptographic signature in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network. | Oct 13, 2026 |
| CVE-2026-102865(opens NVD record) | Medium | 6.5 | Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network. | Oct 13, 2026 |
| CVE-2026-102864(opens NVD record) | Medium | 4.6 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. | Oct 13, 2026 |
| CVE-2026-102863(opens NVD record) | High | 8.8 | Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. | Oct 13, 2026 |
| CVE-2026-102862(opens NVD record) | High | 8.8 | Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. | Oct 13, 2026 |
| CVE-2026-102861(opens NVD record) | High | 8.8 | Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. | Oct 13, 2026 |
| CVE-2026-102860(opens NVD record) | High | 8.8 | Improper access control in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. | Oct 13, 2026 |
| CVE-2026-102859(opens NVD record) | Medium | 4.6 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. | Oct 13, 2026 |
| CVE-2026-102858(opens NVD record) | High | 8.8 | Heap-based buffer overflow in Microsoft Office OneNote allows an unauthorized attacker to execute code over a network. | Oct 13, 2026 |
| CVE-2026-102857(opens NVD record) | High | 8.8 | Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network. | Oct 13, 2026 |
| CVE-2026-102856(opens NVD record) | High | 8.8 | Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network. | Oct 13, 2026 |
| CVE-2026-102851(opens NVD record) | Medium | 6.1 | Incorrect privilege assignment in Visual Studio Code allows an authorized attacker to bypass a security feature locally. | Oct 13, 2026 |
| CVE-2026-102850(opens NVD record) | High | 8.8 | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. | Oct 13, 2026 |
| CVE-2026-102849(opens NVD record) | High | 8.8 | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. | Oct 13, 2026 |
| CVE-2026-102599(opens NVD record) | High | 7.5 | Socket.IO enables bidirectional and low-latency communication for every platform. From Engine.IO 6.6.0 until 6.6.10, a transport upgrade can independently derive an Engine.IO protocol revision from the upgrade request instead of enforcing the revision stored on the existing session. A malicious client can establish a valid session and send an upgrade request with a different or omitted EIO query parameter, attaching a transport with incompatible parser and heartbeat behavior. A crafted heartbeat packet can then trigger an uncaught exception and terminate the Node.js process, including when Engine.IO v3 compatibility is disabled because an omitted EIO value is interpreted as revision 3 on the affected path. This issue is fixed in Engine.IO 6.6.10. | Oct 13, 2026 |
| CVE-2026-102233(opens NVD record) | High | 7.8 | Missing authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally. | Oct 13, 2026 |
| CVE-2026-102232(opens NVD record) | High | 7.0 | Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally. | Oct 13, 2026 |
| CVE-2026-102231(opens NVD record) | High | 7.7 | Improper resolution of path equivalence in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally. | Oct 13, 2026 |
| CVE-2026-102229(opens NVD record) | Medium | 6.8 | Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an authorized attacker to disclose information over a network. | Oct 13, 2026 |
| CVE-2026-102227(opens NVD record) | High | 7.8 | Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally. | Oct 13, 2026 |
| CVE-2026-102226(opens NVD record) | High | 8.8 | Improper limitation of a pathname to a restricted directory ('path traversal') in Dynamics Business Central allows an authorized attacker to elevate privileges over a network. | Oct 13, 2026 |
| CVE-2026-102225(opens NVD record) | High | 8.8 | Out-of-bounds read in Windows Text Shaping allows an unauthorized attacker to execute code over a network. | Oct 13, 2026 |
| CVE-2026-102221(opens NVD record) | Medium | 4.4 | No cwe for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feature locally. | Oct 13, 2026 |
| CVE-2026-102220(opens NVD record) | High | 7.8 | Use after free in Windows VHD miniport driver allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-102218(opens NVD record) | High | 7.8 | Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-102217(opens NVD record) | High | 8.8 | Improper resolution of path equivalence in WebDAV allows an authorized attacker to elevate privileges over a network. | Oct 13, 2026 |
| CVE-2026-102216(opens NVD record) | High | 7.8 | Access of resource using incompatible type ('type confusion') in Windows StateRepository API allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-102215(opens NVD record) | High | 7.8 | Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-102214(opens NVD record) | High | 8.8 | Use after free in Windows Hyper-V allows an authorized attacker to execute code locally. | Oct 13, 2026 |
| CVE-2026-102211(opens NVD record) | High | 7.0 | Use after free in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-102210(opens NVD record) | Critical | 9.8 | Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network. | Oct 13, 2026 |
| CVE-2026-102209(opens NVD record) | High | 7.0 | Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-102208(opens NVD record) | High | 7.0 | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-102207(opens NVD record) | High | 7.0 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-102206(opens NVD record) | Medium | 6.8 | Heap-based buffer overflow in Windows Portable Device MTP Driver allows an unauthorized attacker to elevate privileges with a physical attack. | Oct 13, 2026 |
| CVE-2026-102205(opens NVD record) | High | 7.8 | Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-102204(opens NVD record) | High | 7.8 | Improper link resolution before file access ('link following') in Microsoft Defender for Endpoint allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-102203(opens NVD record) | High | 8.8 | Access of resource using incompatible type ('type confusion') in RPC Runtime allows an unauthorized attacker to execute code over a network. | Oct 13, 2026 |
| CVE-2026-102202(opens NVD record) | High | 7.8 | Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-102201(opens NVD record) | High | 7.8 | Use after free in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-102199(opens NVD record) | Medium | 6.5 | Stack-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to deny service over a network. | Oct 13, 2026 |
| CVE-2026-102198(opens NVD record) | Medium | 5.3 | Out-of-bounds read in Windows Remote Desktop Protocol allows an authorized attacker to disclose information over a network. | Oct 13, 2026 |
| CVE-2026-102197(opens NVD record) | High | 7.0 | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-102196(opens NVD record) | High | 7.8 | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-102195(opens NVD record) | High | 7.0 | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-102194(opens NVD record) | High | 7.0 | Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-102193(opens NVD record) | High | 7.0 | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-102192(opens NVD record) | High | 7.5 | Integer underflow (wrap or wraparound) in Windows Failover Cluster allows an unauthorized attacker to deny service over a network. | Oct 13, 2026 |
| CVE-2026-102191(opens NVD record) | High | 7.0 | Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |
| CVE-2026-102189(opens NVD record) | High | 7.0 | Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 |