CVE-database
126.581 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2026-102196 HIGH · 7.8 Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-102195 HIGH · 7.0 Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-102194 HIGH · 7.0 Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
- CVE-2026-102193 HIGH · 7.0 Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-102192 HIGH · 7.5 Integer underflow (wrap or wraparound) in Windows Failover Cluster allows an unauthorized attacker to deny service over a network.
- CVE-2026-102191 HIGH · 7.0 Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.
- CVE-2026-102189 HIGH · 7.0 Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.
- CVE-2026-102188 MEDIUM · 6.8 Untrusted pointer dereference in Windows Storage Port Driver allows an unauthorized attacker to elevate privileges with a physical attack.
- CVE-2026-102187 MEDIUM · 5.5 Use of uninitialized resource in Windows Kernel allows an authorized attacker to disclose information locally.
- CVE-2026-102186 MEDIUM · 4.7 Untrusted pointer dereference in Windows Network File System allows an authorized attacker to disclose information locally.
- CVE-2026-100225 HIGH · 7.0 Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.
- CVE-2026-100222 CRITICAL · 9.8 Heap-based buffer overflow in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.
- CVE-2026-100220 HIGH · 8.8 Heap-based buffer overflow in Windows Media Video Decoder allows an unauthorized attacker to execute code over a network.
- CVE-2026-100219 CRITICAL · 9.8 Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network. Microsoft
- CVE-2026-100218 HIGH · 8.1 Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.
- CVE-2026-100217 HIGH · 7.8 Improper privilege management in Windows Group Policy allows an authorized attacker to elevate privileges locally.
- CVE-2026-100216 HIGH · 7.0 Stack-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.
- CVE-2026-100215 HIGH · 7.8 Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code locally.
- CVE-2026-100214 HIGH · 8.8 Deserialization of untrusted data in Dynamics Business Central allows an authorized attacker to execute code over a network.
- CVE-2026-100212 HIGH · 8.8 Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. Microsoft
- CVE-2026-100211 HIGH · 8.8 Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. Microsoft
- CVE-2026-100210 HIGH · 8.8 Op heap gebaseerde bufferoverloop in Microsoft Office Excel stelt een ongeautoriseerde aanvaller in staat om code uit te voeren via een netwerk. Microsoft
- CVE-2026-100209 HIGH · 8.8 Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. Microsoft
- CVE-2026-100207 HIGH · 7.3 Improper neutralization of special elements used in an os command ('os command injection') in Azure CycleCloud allows an authorized attacker to execute code locally.
- CVE-2026-100205 HIGH · 7.1 Untrusted pointer dereference in SysInternals allows an authorized attacker to elevate privileges locally.
- CVE-2026-100203 HIGH · 7.0 Op heap gebaseerde bufferoverloop in Windows Update Service stelt een geautoriseerde aanvaller in staat om privileges lokaal te verhogen.
- CVE-2026-100202 CRITICAL · 9.8 Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network.
- CVE-2026-100201 HIGH · 7.0 Heap-based buffer overflow in Windows Client License Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-100200 HIGH · 7.0 Use after free in Windows Update Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-100133 CRITICAL · 9.3 Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form…
- CVE-2026-95502 MEDIUM · 5.3 A Git server that Grafana's Git Sync (provisioning) is configured to use can exhaust Grafana's memory by returning oversized or highly compressed responses (uncontrolled resource…
- CVE-2026-93294 MEDIUM · 6.3 A user with query access to an Azure Monitor data source can use its resource proxy to call Azure Resource Manager APIs beyond those Grafana…
- CVE-2026-92892 CRITICAL · 9.0 Potential arbitrary code execution, under specific configurations.
- CVE-2026-52394 CRITICAL · 9.1 DeepSeek V4 is vulnerable to Incorrect Access Control via a crafted input.
- CVE-2026-37107 CRITICAL · 9.8 An issue in HTMLy v.3.1.1 allows a remote attacker to escalate privileges via the get_feed function in the admin.php component
- CVE-2026-33374 MEDIUM · 6.5 The Prometheus rule conversion API endpoints in Grafana do not limit request body size, allowing authenticated users to trigger unbounded memory allocations that can crash…
- CVE-2026-23707 HIGH · 7.2 An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through…
- CVE-2026-23706 MEDIUM · 6.5 An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through…
- CVE-2026-23705 HIGH · 7.2 An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.2, FortiAnalyzer 7.4.0 through…
- CVE-2026-15577 MEDIUM · 6.5 A user or service account with read-only access to Git Sync (provisioning) connections can modify a connection's configuration through its status subresource (incorrect authorization). On…
- CVE-2026-108385 HIGH · 8.8 dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.38.0 through 0.70.5, BaseGenerator.parse_enum…
- CVE-2026-108384 HIGH · 8.8 dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.38.0 through 0.70.5, BaseGenerator.parse_fixed…
- CVE-2026-108383 HIGH · 8.8 dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.38.0 through 0.70.5, FieldRepresentation.get_field_default…
- CVE-2026-108382 HIGH · 8.8 dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.38.0 through 0.70.5, EnumRepresentation.render_symbols…
- CVE-2026-108381 HIGH · 8.8 dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.44.0 through 0.70.5, the…
- CVE-2026-108380 HIGH · 8.8 dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.65.9 through 0.70.5, PydanticFieldRepresentation.add_field_properties…
- CVE-2026-108379 HIGH · 8.8 dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.38.0 through 0.70.5, BaseGenerator.parse_fixed…
- CVE-2026-108378 HIGH · 8.8 dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.40.0 through 0.70.5, ClassRepresentation.render_docstring…
- CVE-2026-108377 HIGH · 8.8 dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.62.3 through 0.70.5, ClassRepresentation.render_metaclass…
- CVE-2026-108376 HIGH · 8.8 dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.47.3 through 0.70.5, FieldRepresentation.get_field_default…