Export limit exceeded: 28575 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 11023 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 11791 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (11791 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2022-48560 3 Debian, Python, Redhat 4 Debian Linux, Python, Enterprise Linux and 1 more 2026-11-02 7.5 High
A use-after-free exists in Python through 3.9 via heappushpop in heapq.
CVE-2022-3235 3 Debian, Fedoraproject, Vim 3 Debian Linux, Fedora, Vim 2026-11-02 7.8 High
Use After Free in GitHub repository vim/vim prior to 9.0.0490.
CVE-2022-3134 3 Debian, Neovim, Vim 3 Debian Linux, Neovim, Vim 2026-11-02 7.8 High
Use After Free in GitHub repository vim/vim prior to 9.0.0389.
CVE-2022-3099 3 Debian, Fedoraproject, Vim 3 Debian Linux, Fedora, Vim 2026-11-02 7.8 High
Use After Free in GitHub repository vim/vim prior to 9.0.0360.
CVE-2022-3037 3 Fedoraproject, Neovim, Vim 3 Fedora, Neovim, Vim 2026-11-02 7.8 High
Use After Free in GitHub repository vim/vim prior to 9.0.0322.
CVE-2022-3016 2 Fedoraproject, Vim 2 Fedora, Vim 2026-11-02 7.8 High
Use After Free in GitHub repository vim/vim prior to 9.0.0286.
CVE-2022-2982 2 Fedoraproject, Vim 2 Fedora, Vim 2026-11-02 7.8 High
Use After Free in GitHub repository vim/vim prior to 9.0.0260.
CVE-2022-2889 2 Fedoraproject, Vim 2 Fedora, Vim 2026-11-02 7.8 High
Use After Free in GitHub repository vim/vim prior to 9.0.0225.
CVE-2022-2862 2 Fedoraproject, Vim 2 Fedora, Vim 2026-11-02 7.8 High
Use After Free in GitHub repository vim/vim prior to 9.0.0221.
CVE-2022-2817 2 Fedoraproject, Vim 2 Fedora, Vim 2026-11-02 7.8 High
Use After Free in GitHub repository vim/vim prior to 9.0.0213.
CVE-2026-58927 1 Google 1 Android 2026-11-02 N/A
The vulnerability is a Use-After-Free (UAF) in the EVS AIDL HAL, arising from a data race on an unsynchronized `std::weak_ptr` within `EvsEnumerator::openCamera()`. Specifically, concurrent calls from a privileged UID (e.g., `AID_AUTOMOTIVE_EVS`) can cause a torn `weak_ptr` state, leading to a virtual call through a freed object's vtable at `cameraObj->getCameraInfo(&desc)`. This allows for potential arbitrary code execution within the `hal_evs_default` process.
CVE-2026-118654 1 Labstack 1 Echo 2026-11-02 5.9 Medium
Echo is a Go web framework. Prior to 4.16.0 and 5.4.0, Echo's static file handlers can normalize dot segments after route matching and serve a file through a public static route even though the corresponding direct path is protected by route-level middleware. An unauthenticated attacker can read files that an application intended to protect with route-level middleware, when those files are also reachable through a static filesystem mount after path normalization. This vulnerability is the result of an incomplete fix for CVE-2026-55677. This issue is fixed in 4.16.0 and 5.4.0.
CVE-2026-69964 1 Microsoft 28 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 25 more 2026-11-02 7 High
Use after free in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69736 1 Microsoft 28 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 25 more 2026-11-02 7 High
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Credential Manager allows an authorized attacker to elevate privileges locally.
CVE-2026-112697 1 Apple 8 Ios And Ipados, Ipados, Iphone Os and 5 more 2026-11-02 8.8 High
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to arbitrary code execution.
CVE-2026-112639 1 Apple 6 Ios And Ipados, Ipados, Iphone Os and 3 more 2026-11-02 8.8 High
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. Processing maliciously crafted web content may lead to arbitrary code execution.
CVE-2026-20515 1 Mediatek, Inc. 1 Mediatek Chipset 2026-11-02 5 Medium
In gpu, there is a possible system crash due to use after free. This could lead to local information disclosure with User execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS11122991; Issue ID: MSV-8132.
CVE-2026-112655 1 Apple 8 Ios And Ipados, Ipados, Iphone Os and 5 more 2026-11-02 8.8 High
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to arbitrary code execution.
CVE-2026-101183 1 Huawei 1 Harmonyos 2026-11-02 5.9 Medium
UAF vulnerability in the location service module. Impact: Successful exploitation of this vulnerability may affect availability.
CVE-2026-20558 2 Mediatek, Mediatek, Inc. 2 Mediatek Chipset, Mediatek Chipset 2026-11-02 8.4 High
In GPU pdma, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11365070; Issue ID: MSV-9547.