Export limit exceeded: 10623 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (10623 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-55275 1 Google 1 Android 2026-11-03 7.4 High
In multiple locations, there is a possible use-after-free due to a race condition. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2023-5197 2 Debian, Linux 2 Debian Linux, Linux Kernel 2026-11-02 7.8 High
A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. Addition and removal of rules from chain bindings within the same transaction causes leads to use-after-free. We recommend upgrading past commit f15f29fd4779be8a418b66e9d52979bb6d6c2325.
CVE-2023-46751 2 Artifex, Redhat 2 Ghostscript, Enterprise Linux 2026-11-02 7.5 High
An issue was discovered in the function gdev_prn_open_printer_seekable() in Artifex Ghostscript through 10.02.0 allows remote attackers to crash the application via a dangling pointer.
CVE-2022-48560 3 Debian, Python, Redhat 4 Debian Linux, Python, Enterprise Linux and 1 more 2026-11-02 7.5 High
A use-after-free exists in Python through 3.9 via heappushpop in heapq.
CVE-2026-58857 1 Google 1 Android 2026-11-02 N/A
In decrypt of CryptoHalHidl.cpp, there is a possible use-after-free due to a race condition. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2022-3235 3 Debian, Fedoraproject, Vim 3 Debian Linux, Fedora, Vim 2026-11-02 7.8 High
Use After Free in GitHub repository vim/vim prior to 9.0.0490.
CVE-2022-3134 3 Debian, Neovim, Vim 3 Debian Linux, Neovim, Vim 2026-11-02 7.8 High
Use After Free in GitHub repository vim/vim prior to 9.0.0389.
CVE-2022-3099 3 Debian, Fedoraproject, Vim 3 Debian Linux, Fedora, Vim 2026-11-02 7.8 High
Use After Free in GitHub repository vim/vim prior to 9.0.0360.
CVE-2022-3037 3 Fedoraproject, Neovim, Vim 3 Fedora, Neovim, Vim 2026-11-02 7.8 High
Use After Free in GitHub repository vim/vim prior to 9.0.0322.
CVE-2022-3016 2 Fedoraproject, Vim 2 Fedora, Vim 2026-11-02 7.8 High
Use After Free in GitHub repository vim/vim prior to 9.0.0286.
CVE-2022-2982 2 Fedoraproject, Vim 2 Fedora, Vim 2026-11-02 7.8 High
Use After Free in GitHub repository vim/vim prior to 9.0.0260.
CVE-2022-2889 2 Fedoraproject, Vim 2 Fedora, Vim 2026-11-02 7.8 High
Use After Free in GitHub repository vim/vim prior to 9.0.0225.
CVE-2022-2862 2 Fedoraproject, Vim 2 Fedora, Vim 2026-11-02 7.8 High
Use After Free in GitHub repository vim/vim prior to 9.0.0221.
CVE-2022-2817 2 Fedoraproject, Vim 2 Fedora, Vim 2026-11-02 7.8 High
Use After Free in GitHub repository vim/vim prior to 9.0.0213.
CVE-2026-58927 1 Google 1 Android 2026-11-02 N/A
The vulnerability is a Use-After-Free (UAF) in the EVS AIDL HAL, arising from a data race on an unsynchronized `std::weak_ptr` within `EvsEnumerator::openCamera()`. Specifically, concurrent calls from a privileged UID (e.g., `AID_AUTOMOTIVE_EVS`) can cause a torn `weak_ptr` state, leading to a virtual call through a freed object's vtable at `cameraObj->getCameraInfo(&desc)`. This allows for potential arbitrary code execution within the `hal_evs_default` process.
CVE-2026-69964 1 Microsoft 28 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 25 more 2026-11-02 7 High
Use after free in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69736 1 Microsoft 28 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 25 more 2026-11-02 7 High
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Credential Manager allows an authorized attacker to elevate privileges locally.
CVE-2026-112697 1 Apple 8 Ios And Ipados, Ipados, Iphone Os and 5 more 2026-11-02 8.8 High
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to arbitrary code execution.
CVE-2026-112639 1 Apple 6 Ios And Ipados, Ipados, Iphone Os and 3 more 2026-11-02 8.8 High
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. Processing maliciously crafted web content may lead to arbitrary code execution.
CVE-2026-20515 1 Mediatek, Inc. 1 Mediatek Chipset 2026-11-02 5 Medium
In gpu, there is a possible system crash due to use after free. This could lead to local information disclosure with User execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS11122991; Issue ID: MSV-8132.