Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (10308 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-65343 1 Apple 4 Ios And Ipados, Ipados, Iphone Os and 1 more 2026-09-14 7.5 High
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. A remote attacker may be able to cause unexpected system termination.
CVE-2026-64715 1 Apple 5 Ios And Ipados, Ipados, Iphone Os and 2 more 2026-09-14 6.5 Medium
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. Processing maliciously crafted web content may lead to an unexpected process crash.
CVE-2026-64718 1 Apple 8 Ios And Ipados, Ipados, Iphone Os and 5 more 2026-09-14 5.5 Medium
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.6, Safari 27, iOS 26.6 and iPadOS 26.6, iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, visionOS 27, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected Safari crash.
CVE-2026-43715 1 Apple 5 Ios And Ipados, Ipados, Iphone Os and 2 more 2026-09-14 8.8 High
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, iOS 26.7 and iPadOS 26.7, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to memory corruption.
CVE-2026-85921 1 Microsoft 1 Windows 11 26h1 2026-09-14 8.2 High
Double free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
CVE-2026-69539 1 Microsoft 26 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 23 more 2026-09-14 7.5 High
Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network.
CVE-2026-69567 1 Microsoft 26 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 23 more 2026-09-14 7 High
Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVE-2026-69599 1 Microsoft 10 Windows 11 23h2, Windows 11 23h2, Windows 11 24h2 and 7 more 2026-09-14 7.5 High
Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network.
CVE-2026-69287 1 Microsoft 26 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 23 more 2026-09-14 7 High
Use after free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.
CVE-2026-69366 1 Microsoft 20 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 17 more 2026-09-14 7.1 High
Use after free in Windows Kernel allows an authorized attacker to elevate privileges over a network.
CVE-2026-69473 1 Microsoft 26 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 23 more 2026-09-14 7 High
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-69525 1 Microsoft 26 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 23 more 2026-09-14 9.8 Critical
Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.
CVE-2026-69536 1 Microsoft 10 Windows 11 23h2, Windows 11 23h2, Windows 11 24h2 and 7 more 2026-09-14 7.1 High
Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network.
CVE-2026-81950 1 Microsoft 12 365, 365 Apps, Excel and 9 more 2026-09-14 7.8 High
Double free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-68893 1 Microsoft 8 Windows 10 1607, Windows 10 1809, Windows Server 2012 and 5 more 2026-09-14 7.1 High
Use after free in Windows Remote Desktop Licensing Service allows an authorized attacker to elevate privileges over a network.
CVE-2026-90794 1 Gpac 1 Gpac 2026-09-14 6.3 Medium
A vulnerability was found in GPAC up to f1219cde. The affected element is the function gf_sg_script_load of the file scenegraph/vrml_tools.c of the component MP4Box. Performing a manipulation results in use after free. It is possible to initiate the attack remotely. The exploit has been made public and could be used. Upgrading to version abi-16.23 is sufficient to fix this issue. The patch is named 9eb40df4448b88d6a6ce3454657c06f47eff0b24. It is advisable to upgrade the affected component.
CVE-2026-87825 1 Luben 1 Zstd-jni 2026-09-14 7.7 High
zstd-jni before 1.5.7-14 contains a use-after-free vulnerability where streams and contexts hold a dictionary's shared lock only during the load call, allowing the dictionary to be closed while still referenced. Attackers can close a dictionary after associating it with a stream or context, causing subsequent read or write operations to access freed native memory, resulting in silent data corruption or JVM crashes.
CVE-2021-36081 2 Linux, Tesseract-ocr 2 Linux Kernel, Tesseract Ocr 2026-09-14 7.8 High
Tesseract OCR 5.0.0-alpha-20201231 has a one_ell_conflict use-after-free during a strpbrk call.
CVE-2026-38998 1 Live555 1 Streaming Media 2026-09-14 6.5 Medium
A use-after-free in the SocketDescriptor::tcpReadHandler1 function (liveMedia/RTPInterface.cpp) of LIVE555 Streaming Media (version 2026.02.26) allows attackers to cause a Denial of Service (DoS) via sending a series of crafted RTSP and HTTP requests to the server.
CVE-2026-14164 3 Libarchive, Red Hat, Redhat 12 Libarchive, Enterprise Linux, Discovery and 9 more 2026-09-14 7.5 High
A double free issue has been identified in libarchive's RAR5 reader. During parsing of a specially crafted RAR5 archive, the filtered_buf pointer may remain stale after being freed during unpacking state reinitialization. Subsequent processing of another archive entry can trigger a second free of the same memory region, resulting in a double-free condition. Successful exploitation may cause applications using the vulnerable libarchive API to terminate unexpectedly, leading to a denial of service.