Export limit exceeded: 389564 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (389564 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-81644 | 2026-09-09 | 4.3 Medium | ||
| DoS vulnerability in the preview service module. Impact: Successful exploitation of this vulnerability may affect availability. | ||||
| CVE-2026-21100 | 2026-09-09 | N/A | ||
| Improper access control in SystemUI prior to SMR Sep-2026 Release 1 allows local attackers to launch arbitrary activity. | ||||
| CVE-2026-21102 | 2026-09-09 | N/A | ||
| Use after free in DualDAR prior to SMR Sep-2026 Release 1 allows local privileged attackers to execute arbitrary code with root privilege. | ||||
| CVE-2026-81388 | 1 Microsoft | 11 365 Apps, Excel, Excel 2016 and 8 more | 2026-09-09 | 7.8 High |
| Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | ||||
| CVE-2026-81387 | 1 Microsoft | 11 365 Apps, Excel, Excel 2016 and 8 more | 2026-09-09 | 5.5 Medium |
| Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. | ||||
| CVE-2026-81386 | 1 Microsoft | 11 365 Apps, Excel, Excel 2016 and 8 more | 2026-09-09 | 7.8 High |
| Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | ||||
| CVE-2026-4765 | 1 Rd Station Conversas | 1 Tallos Chat | 2026-09-09 | N/A |
| Self Cross-Site Scripting (Self-XSS) vulnerability in the RD Station Conversas chat feature. The vulnerability lies in the ‘name’ parameter of the initialisation process due to incorrect sanitisation of user-supplied input. Exploitation allows specially crafted JavaScript code to be injected, which is executed within the context of the user’s own session who provides the payload. The demonstrated impact is limited to the user who enters and executes the payload. | ||||
| CVE-2026-78515 | 1 Microsoft | 9 365 Apps, Microsoft 365, Office 2016 and 6 more | 2026-09-09 | 6.5 Medium |
| Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. | ||||
| CVE-2026-72974 | 1 Microsoft | 9 365 Apps, Microsoft 365, Office 2016 and 6 more | 2026-09-09 | 6.5 Medium |
| Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. | ||||
| CVE-2026-87734 | 2026-09-09 | 7.5 High | ||
| An issue was discovered in the utcp package before 0.0.6 for OCaml. Out-of-order segment reassembly allows remote denial of service. | ||||
| CVE-2026-21088 | 2026-09-09 | N/A | ||
| Improper input validation in loading a subtitle frame in libsubextractor.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory. | ||||
| CVE-2026-21092 | 2026-09-09 | N/A | ||
| Path traversal in ImsService prior to SMR Sep-2026 Release 1 allows remote attackers to create image files with system server privilege. | ||||
| CVE-2026-21103 | 2026-09-09 | N/A | ||
| Path traversal in GalaxyDiagnostics prior to SMR Sep-2026 Release 1 allows physical attackers to access files with system privilege. | ||||
| CVE-2026-21104 | 2026-09-09 | N/A | ||
| Heap-based buffer overflow in KnoxVault trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to execute arbitrary code. | ||||
| CVE-2026-21112 | 2026-09-09 | N/A | ||
| Improper input validation in Samsung Tips prior to Android 17 allows local attackers to launch arbitrary activity with Samsung Tips privilege. User interaction is required for triggering this vulnerability. | ||||
| CVE-2026-81646 | 2026-09-09 | 5.9 Medium | ||
| Out-of-bounds read vulnerability in the graphics module. Impact: Successful exploitation of this vulnerability may affect availability. | ||||
| CVE-2026-81647 | 2026-09-09 | 5.3 Medium | ||
| Out-of-bounds read vulnerability in the graphics module. Impact: Successful exploitation of this vulnerability may affect availability. | ||||
| CVE-2026-49315 | 2026-09-09 | 7.1 High | ||
| DoS vulnerability in the input device module. Impact: Successful exploitation of this vulnerability may affect availability. | ||||
| CVE-2026-41987 | 2026-09-09 | 6.2 Medium | ||
| Permission control vulnerability in the app management module. Impact: Successful exploitation of this vulnerability may affect availability. | ||||
| CVE-2026-49309 | 2026-09-09 | 4.8 Medium | ||
| Permission control vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. | ||||