CVE-database
126.581 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2026-105718 HIGH · 8.8 Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. Microsoft
- CVE-2026-105717 HIGH · 8.8 Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
- CVE-2026-105716 HIGH · 8.8 Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
- CVE-2026-105715 HIGH · 7.5 Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to execute code over a network. Microsoft
- CVE-2026-105714 HIGH · 7.5 Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
- CVE-2026-105713 MEDIUM · 5.7 Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over an adjacent network. Microsoft
- CVE-2026-105599 HIGH · 7.5 Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
- CVE-2026-105598 HIGH · 8.8 Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
- CVE-2026-105597 HIGH · 8.8 Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
- CVE-2026-105596 HIGH · 8.8 Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
- CVE-2026-105595 HIGH · 8.8 Out-of-bounds read in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
- CVE-2026-105593 HIGH · 8.8 Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
- CVE-2026-105592 HIGH · 7.5 Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
- CVE-2026-105591 HIGH · 8.8 Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
- CVE-2026-105016 CRITICAL · 9.8 Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network.
- CVE-2026-105013 HIGH · 7.4 Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. Microsoft
- CVE-2026-105010 CRITICAL · 9.8 Use after free in Microsoft Windows Search Component allows an unauthorized attacker to elevate privileges over a network.
- CVE-2026-105009 HIGH · 7.5 Incorrect default permissions in Windows Server Update Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-105008 CRITICAL · 9.0 No cwe for this issue in Windows Schannel allows an unauthorized attacker to perform spoofing over a network.
- CVE-2026-105007 HIGH · 8.8 An elevation of privilege vulnerability exists in the Network Driver Interface Specification (NDIS) when ndis.sys fails to check the length of a buffer prior to…
- CVE-2026-105006 MEDIUM · 6.4 Use after free in HID class driver allows an unauthorized attacker to elevate privileges with a physical attack.
- CVE-2026-105005 HIGH · 8.1 Out-of-bounds write in Windows Schannel allows an unauthorized attacker to execute code over a network.
- CVE-2026-105004 HIGH · 7.8 Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
- CVE-2026-105003 HIGH · 7.8 Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-104937 NONE Shopware version 6.7 allows the upload of attacker‑controlled HTML files and serves them as text/html without effective security headers, enabling stored cross-site scripting (XSS). When…
- CVE-2026-104875 HIGH · 7.1 Ente provides end-to-end encrypted cloud services and security tools. Prior to server image 2026.07.09, the POST /emergency-contacts/approve-recovery endpoint authorized approval using a client-supplied userID and…
- CVE-2026-104817 NONE Misskey is an open source, federated social media platform. From 12.112.1 until 2026.7.0, the unauthenticated fetch-rss API lacks rate limiting and response-size restrictions and performs…
- CVE-2026-104816 NONE Misskey is an open source, federated social media platform. From 12.0.0 until 2026.7.0, the RSS components display feed item links from configured feeds without verifying…
- CVE-2026-104584 NONE reNgine up to v2.2.0 and current master branch (commit de4199222cca5618f1255930ce78987e47d43a99) is vulnerable to OS Command Injection via the custom_headers scan engine configuration field in web/reNgine/tasks.py…
- CVE-2026-104344 HIGH · 7.8 Adobe Framemaker is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation…
- CVE-2026-104343 MEDIUM · 5.5 Adobe Framemaker is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash…
- CVE-2026-104342 HIGH · 7.8 Adobe Framemaker is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation…
- CVE-2026-104341 HIGH · 7.8 Adobe Framemaker is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of…
- CVE-2026-104340 HIGH · 7.8 Adobe Framemaker is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation…
- CVE-2026-103967 HIGH · 7.8 Adobe Framemaker is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of…
- CVE-2026-103966 HIGH · 7.8 Adobe Framemaker is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation…
- CVE-2026-103937 NONE Misskey is an open source, federated social media platform. From 13.0.0 until 2025.4.1 and from 2025.5.0 until 2026.7.0, cleanup processing may not execute during file…
- CVE-2026-103857 MEDIUM · 5.5 Adobe Framemaker is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose…
- CVE-2026-103856 MEDIUM · 5.5 Adobe Framemaker is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose…
- CVE-2026-103849 CRITICAL · 10.0 Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could result in arbitrary code execution in…
- CVE-2026-103578 MEDIUM · 6.8 Untrusted pointer dereference in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack.
- CVE-2026-103577 HIGH · 7.5 Insecure default variable initialization in Microsoft QUIC allows an unauthorized attacker to bypass a security feature over a network.
- CVE-2026-103576 MEDIUM · 6.5 Url redirection to untrusted site ('open redirect') in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.
- CVE-2026-103575 HIGH · 8.8 Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
- CVE-2026-103572 HIGH · 8.8 Improper control of generation of code ('code injection') in Visual Studio Tools for Applications and SQL Server Management Studio allows an unauthorized attacker to execute…
- CVE-2026-103569 HIGH · 7.5 Out-of-bounds read in Windows IKE Extension allows an unauthorized attacker to disclose information over a network.
- CVE-2026-103568 HIGH · 7.8 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Credential Providers allows an authorized attacker to elevate privileges locally.
- CVE-2026-103567 MEDIUM · 5.5 Buffer over-read in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally.
- CVE-2026-103565 HIGH · 7.0 Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-103560 MEDIUM · 5.5 Improper authorization in DNS Server allows an authorized attacker to perform tampering locally.