Export limit exceeded: 47582 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (47582 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-95302 1 Google 2 Android, Chrome 2026-09-30 2.9 Low
Incorrect authorization in WebAPKs in Google Chrome on on Android prior to 154.0.8037.57 allowed a local attacker to obtain cross-origin data via a co-installed app. (Chromium security severity: Medium)
CVE-2026-102321 1 Google 1 Chrome 2026-09-30 8.8 High
Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-102323 1 Google 1 Chrome 2026-09-30 8.8 High
Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-102324 1 Google 1 Chrome 2026-09-30 8.3 High
Use after free in PictureInPicture in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-102326 1 Google 1 Chrome 2026-09-30 8.8 High
Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-102328 1 Google 1 Chrome 2026-09-30 8.8 High
Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-65489 2 Lastudio, Wordpress 2 La-studio Element Kit For Elementor, Wordpress 2026-09-30 5.3 Medium
Missing Authorization vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.6.2.
CVE-2026-97293 2026-09-30 8.5 High
Contributor SQL Injection in Media LIbrary Assistant <= 3.41 versions.
CVE-2026-97267 2026-09-30 4.3 Medium
Subscriber Broken Access Control in Prevent files / folders access <= 2.6.7 versions.
CVE-2026-97247 2026-09-30 6.5 Medium
Unauthenticated Broken Access Control in Blocksy Companion <= 2.1.55 versions.
CVE-2026-97243 2026-09-30 5.4 Medium
Subscriber Broken Access Control in AllAble Connector <= 0.13.4 versions.
CVE-2026-97239 2026-09-30 6.5 Medium
Subscriber Broken Access Control in MCP Content Manager Lite <= 1.1.0 versions.
CVE-2026-97197 2026-09-30 7.5 High
Unauthenticated Broken Access Control in WordPress Backup & Migration <= 1.6.0 versions.
CVE-2026-96828 2026-09-30 7.6 High
Administrator SQL Injection in Category Discount Woocommerce <= 5.18 versions.
CVE-2026-96827 2026-09-30 7.6 High
Administrator SQL Injection in Admin Notices Manager <= 1.6.0 versions.
CVE-2026-96823 2026-09-30 7.5 High
Unauthenticated Arbitrary Content Deletion in Customer Reviews for WooCommerce <= 5.120.0 versions.
CVE-2026-96822 2026-09-30 9.3 Critical
Unauthenticated SQL Injection in Books Gallery <= 4.8.3 versions.
CVE-2026-96818 2026-09-30 7.5 High
Unauthenticated Broken Access Control in WP Express Checkout (Accept PayPal Payments) <= 2.4.9 versions.
CVE-2026-96817 2026-09-30 8.2 High
Subscriber Broken Access Control in MakeCommerce for WooCommerce <= 4.1.0 versions.
CVE-2026-96348 2026-09-30 7.5 High
Unauthenticated Broken Access Control in Bookly <= 28.2 versions.