Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (3387 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2021-42283 1 Microsoft 23 Windows 10, Windows 10 1507, Windows 10 1607 and 20 more 2026-08-19 8.8 High
NTFS Elevation of Privilege Vulnerability
CVE-2021-42282 1 Microsoft 11 Windows Server, Windows Server 2004, Windows Server 2008 and 8 more 2026-08-19 7.5 High
Active Directory Domain Services Elevation of Privilege Vulnerability
CVE-2021-42277 1 Microsoft 18 Visual Studio, Visual Studio 2015, Visual Studio 2017 and 15 more 2026-08-19 5.5 Medium
Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability
CVE-2021-41370 1 Microsoft 22 Windows 10, Windows 10 1507, Windows 10 1607 and 19 more 2026-08-19 7.8 High
NTFS Elevation of Privilege Vulnerability
CVE-2021-43211 1 Microsoft 1 Windows 10 Update Assistant 2026-08-19 5.5 Medium
Windows 10 Update Assistant Elevation of Privilege Vulnerability
CVE-2021-42322 1 Microsoft 1 Visual Studio Code 2026-08-19 7.8 High
Visual Studio Code Elevation of Privilege Vulnerability
CVE-2021-42319 1 Microsoft 2 Visual Studio 2017, Visual Studio 2019 2026-08-19 4.7 Medium
Visual Studio Elevation of Privilege Vulnerability
CVE-2021-42304 1 Microsoft 1 Azure Real Time Operating System 2026-08-19 6.6 Medium
Azure RTOS Elevation of Privilege Vulnerability
CVE-2021-42303 1 Microsoft 1 Azure Real Time Operating System 2026-08-19 6.6 Medium
Azure RTOS Elevation of Privilege Vulnerability
CVE-2021-42302 1 Microsoft 1 Azure Real Time Operating System 2026-08-19 6.6 Medium
Azure RTOS Elevation of Privilege Vulnerability
CVE-2021-42280 1 Microsoft 13 Windows 10, Windows 10 1607, Windows 10 1809 and 10 more 2026-08-19 5.5 Medium
Windows Feedback Hub Elevation of Privilege Vulnerability
CVE-2021-41377 1 Microsoft 22 Windows 10, Windows 10 1507, Windows 10 1607 and 19 more 2026-08-19 7.8 High
Windows Fast FAT File System Driver Elevation of Privilege Vulnerability
CVE-2021-41367 1 Microsoft 22 Windows 10, Windows 10 1507, Windows 10 1607 and 19 more 2026-08-19 7.8 High
NTFS Elevation of Privilege Vulnerability
CVE-2021-41366 1 Microsoft 18 Windows 10, Windows 10 1507, Windows 10 1607 and 15 more 2026-08-19 7.8 High
Credential Security Support Provider Protocol (CredSSP) Elevation of Privilege Vulnerability
CVE-2021-36957 1 Microsoft 12 Windows 10, Windows 10 1607, Windows 10 1809 and 9 more 2026-08-19 7.8 High
Windows Desktop Bridge Elevation of Privilege Vulnerability
CVE-2026-74942 1 Mozilla 2 Firefox, Thunderbird 2026-08-19 8.8 High
Privilege escalation in the Remote Settings Client component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-75857 1 Hmbown 1 Codewhale 2026-08-19 7 High
CodeWhale versions >= 0.8.41 and < 0.8.64 contain a vulnerability in the exec_shell_interact (alias exec_interact) tool, whose approval_requirement returns ApprovalRequirement::Auto. This overrides the default Required approval for code-executing tools, so LLM-controlled stdin is written into an already-approved long-running interactive shell (e.g., a python3 -i REPL, mysql, ssh, or sudo -i session) without any approval prompt. An attacker who can inject instructions via untrusted content the agent ingests (a fetched page, MCP result, or repo file) can cause commands to run at the privilege level of that approved process. Fixed in 0.8.64.
CVE-2026-75837 1 Getgrav 1 Grav 2026-08-19 9.1 Critical
Grav before 2.0.14 fails to guard the access field in the core group blueprint with the required security@: admin.super restriction. A delegated admin.users operator can save a group with access[admin][super]=true to escalate to super-admin, gaining scheduler and Twig evaluation capabilities.
CVE-2026-61225 1 Oracle 1 Communications Converged Application Server 2026-08-19 8.1 High
Vulnerability in the Oracle Communications Converged Application Server product of Oracle Communications (component: Core). Supported versions that are affected are 8.2 and 8.3. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TCP/IP to compromise Oracle Communications Converged Application Server. Successful attacks of this vulnerability can result in takeover of Oracle Communications Converged Application Server. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).
CVE-2026-61053 1 Oracle 2 Communications Billing And Revenue Management Elastic Charging Engine, Communications Brm - Elastic Charging Engine 2026-08-19 7.8 High
Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications (component: Diameter Gateway and SDK). Supported versions that are affected are 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Communications BRM - Elastic Charging Engine executes to compromise Oracle Communications BRM - Elastic Charging Engine. Successful attacks of this vulnerability can result in takeover of Oracle Communications BRM - Elastic Charging Engine. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).