Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (110965 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-117890 1 Mozilla 1 Firefox 2026-11-04 7.3 High
JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-116819 1 Openpanel 1 Openpanel 2026-11-04 8.5 High
OpenPanel before 3.0.0 contains an information disclosure vulnerability that allows read-level project members to obtain plaintext integration secrets because the notification.rules query skips redactIntegration. Attackers can call the notification.rules tRPC query to retrieve Slack bot tokens, webhook URLs, and authorization headers for use against external systems.
CVE-2026-118175 1 Mozilla 1 Thunderbird 2026-11-04 7.5 High
When replying to, forwarding, or editing a crafted email message as new, Thunderbird could embed parts of a different message stored in the same folder into the message being composed, without showing a blocked content warning. If the user sent the message, the content of the other message was disclosed to the recipients. This vulnerability was fixed in Thunderbird 159 and Thunderbird 153.6.
CVE-2026-112470 1 Apple 7 Ios And Ipados, Ipados, Iphone Os and 4 more 2026-11-04 7.8 High
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to cause unexpected system termination or corrupt kernel memory.
CVE-2026-113934 1 Apple 1 Macos 2026-11-04 7.8 High
The issue was addressed with improved memory handling. This issue is fixed in macOS Golden Gate 27.2. An app may be able to cause unexpected system termination or corrupt kernel memory.
CVE-2026-112477 1 Apple 7 Ios And Ipados, Ipados, Iphone Os and 4 more 2026-11-04 7 High
A race condition was addressed with improved locking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to cause unexpected system termination or corrupt kernel memory.
CVE-2026-117867 1 Mozilla 1 Firefox 2026-11-04 7.3 High
Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-9212 1 Netgear 47 Lbr1020, Lbr1020 Firmware, Lbr20 and 44 more 2026-11-04 8.0 High
Insufficient authentication and input validation in the listed NETGEAR models allow users connected to the local network to execute commands impacting the product's confidentiality or change certain configurations.
CVE-2026-87086 1 Tanium 1 Provision 2026-11-04 7.5 High
Tanium addressed a denial of service vulnerability in Provision.
CVE-2026-117872 1 Mozilla 1 Firefox 2026-11-04 8.8 High
Use-after-free in the JavaScript: Standard Library component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117860 1 Mozilla 2 Firefox, Thunderbird 2026-11-04 8.1 High
Same-origin policy bypass in the DOM: Navigation component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-116649 1 Tanium 1 Enforce 2026-11-04 7.1 High
Tanium addressed an improper output sanitization vulnerability in Enforce.
CVE-2026-116647 1 Tanium 1 Comply 2026-11-04 7.1 High
Tanium addressed an improper output sanitization vulnerability in Comply.
CVE-2026-108304 1 Tanium 2 End-user-cx, Endpoint Configuration Toolset Solution 2026-11-04 7.8 High
Tanium addressed a local privilege escalation vulnerability in End-User Notifications.
CVE-2026-86969 1 Apple 4 Ios And Ipados, Ipados, Iphone Os and 1 more 2026-11-04 7.5 High
An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to cause unexpected system termination or corrupt kernel memory.
CVE-2026-117889 1 Mozilla 1 Firefox 2026-11-04 7.3 High
Incorrect boundary conditions in the JavaScript Engine component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-90629 1 Apache 1 Openoffice 2026-11-04 7.3 High
An uncontrolled memory access in the WMF import code of Apache OpenOffice versions through 4.1.16 allows a crafted WMF file to cause an invalid memory access, causing program crash or memory corruption. Users are recommended to upgrade to version 4.1.17, which fixes this issue.
CVE-2026-112570 1 Apple 1 Macos 2026-11-04 8.2 High
An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to break out of its sandbox.
CVE-2026-112607 1 Apple 4 Ios And Ipados, Ipados, Iphone Os and 1 more 2026-11-04 8.2 High
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2. A remote attacker may be able to leak memory.
CVE-2026-86986 1 Apple 6 Ios And Ipados, Ipados, Iphone Os and 3 more 2026-11-04 7.5 High
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. Processing maliciously crafted web content may lead to an unexpected Safari crash.