Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (496 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-48567 1 Microsoft 2 .azure Horizondb, Azure Horizondb 2026-08-24 10 Critical
Authentication bypass by spoofing in Azure HorizonDB allows an unauthorized attacker to elevate privileges over a network.
CVE-2021-27080 1 Microsoft 1 Azure Sphere 2026-08-19 9.3 Critical
Azure Sphere Unsigned Code Execution Vulnerability
CVE-2021-27075 1 Microsoft 6 Azure Container Instance, Azure Container Instances, Azure Container Registry and 3 more 2026-08-19 6.8 Medium
Azure Virtual Machine Information Disclosure Vulnerability
CVE-2021-27074 1 Microsoft 1 Azure Sphere 2026-08-19 6.2 Medium
Azure Sphere Unsigned Code Execution Vulnerability
CVE-2021-42306 1 Microsoft 4 Azure Active Directory, Azure Active Site Recovery, Azure Automation and 1 more 2026-08-19 8.1 High
An information disclosure vulnerability manifests when a user or an application uploads unprotected private key data as part of an authentication certificate keyCredential  on an Azure AD Application or Service Principal (which is not recommended). This vulnerability allows a user or service in the tenant with application read access to read the private key data that was added to the application. Azure AD addressed this vulnerability by preventing disclosure of any private key values added to the application. Microsoft has identified services that could manifest this vulnerability, and steps that customers should take to be protected. Refer to the FAQ section for more information. For more details on this issue, please refer to the MSRC Blog Entry.
CVE-2021-26444 1 Microsoft 1 Azure Real Time Operating System 2026-08-19 3.3 Low
Azure RTOS Information Disclosure Vulnerability
CVE-2021-42323 1 Microsoft 1 Azure Real Time Operating System 2026-08-19 3.3 Low
Azure RTOS Information Disclosure Vulnerability
CVE-2021-41376 1 Microsoft 1 Azure Sphere 2026-08-19 2.3 Low
Azure Sphere Information Disclosure Vulnerability
CVE-2021-41375 1 Microsoft 1 Azure Sphere 2026-08-19 4.4 Medium
Azure Sphere Information Disclosure Vulnerability
CVE-2021-41374 1 Microsoft 1 Azure Sphere 2026-08-19 6.7 Medium
Azure Sphere Information Disclosure Vulnerability
CVE-2021-42304 1 Microsoft 1 Azure Real Time Operating System 2026-08-19 6.6 Medium
Azure RTOS Elevation of Privilege Vulnerability
CVE-2021-42303 1 Microsoft 1 Azure Real Time Operating System 2026-08-19 6.6 Medium
Azure RTOS Elevation of Privilege Vulnerability
CVE-2021-42302 1 Microsoft 1 Azure Real Time Operating System 2026-08-19 6.6 Medium
Azure RTOS Elevation of Privilege Vulnerability
CVE-2021-42301 1 Microsoft 2 Azure Real Time Operating System, Azure Rtos 2026-08-19 3.3 Low
Azure RTOS Information Disclosure Vulnerability
CVE-2021-42300 1 Microsoft 1 Azure Sphere 2026-08-19 6 Medium
Azure Sphere Tampering Vulnerability
CVE-2026-47632 1 Microsoft 2 Azure Connected Machine Agent, Azure Monitor Agent Metrics Extension 2026-08-18 8.8 High
Improper certificate validation in Azure Connected Machine Agent allows an unauthorized attacker to elevate privileges over an adjacent network.
CVE-2026-63522 1 Microsoft 1 Azure Sql Database 2026-08-17 7.8 High
Incorrect permission assignment for critical resource in Azure SQL Database allows an authorized attacker to elevate privileges locally.
CVE-2026-35425 1 Microsoft 1 Azure Api Management 2026-08-17 8 High
Improper access control in Azure API Management (APIM) allows an authorized attacker to execute code over a network.
CVE-2026-47299 1 Microsoft 2 Azure Monitor Agent, Azure Monitor Agent Linux Extension 2026-08-13 7.2 High
Improper neutralization of special elements used in a command ('command injection') in Azure Monitor Agent allows an authorized attacker to elevate privileges over a network.
CVE-2026-50516 1 Microsoft 1 Azure Kubernetes Service 2026-08-12 9.4 Critical
Missing authentication for critical function in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network.