Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (460 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-58630 1 Microsoft 1 Azure App Service 2026-07-24 10 Critical
Improper access control in Azure App Service allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-62835 1 Microsoft 1 Azure Portal 2026-07-24 9.3 Critical
Improper authorization in Azure Portal allows an unauthorized attacker to disclose information over a network.
CVE-2026-58275 1 Microsoft 1 Azure Dns 2026-07-24 10 Critical
Missing authorization in Azure DNS allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-62825 1 Microsoft 1 Azure Key Vault 2026-07-24 10 Critical
Improper authentication in Azure Key Vault allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-56160 1 Microsoft 1 Azure Red Hat Openshift 2026-07-24 9.1 Critical
Improper authorization in Azure Red Hat OpenShift (ARO) allows an authorized attacker to elevate privileges over a network.
CVE-2026-56163 1 Microsoft 1 Azure Kubernetes Service 2026-07-24 10 Critical
Missing authentication for critical function in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-56167 1 Microsoft 2 Azure Ai Search, Azure Ai Search 2026-07-24 8.5 High
Server-side request forgery (ssrf) in Azure AI Search allows an authorized attacker to elevate privileges over a network.
CVE-2026-35425 1 Microsoft 1 Azure Api Management 2026-07-24 8 High
Improper access control in Azure API Management (APIM) allows an authorized attacker to execute code over a network.
CVE-2026-50653 1 Microsoft 3 .net, .net Framework, Azure Active Directory 2026-07-22 7.5 High
Loop with unreachable exit condition ('infinite loop') in Azure Active Directory allows an unauthorized attacker to deny service over a network.
CVE-2026-50652 1 Microsoft 3 .net, .net Framework, Azure Active Directory 2026-07-22 7.5 High
Deserialization of untrusted data in Azure Active Directory allows an unauthorized attacker to deny service over a network.
CVE-2026-57969 1 Microsoft 1 Azure Cyclecloud 2026-07-15 8.8 High
Missing authentication for critical function in Azure CycleCloud allows an authorized attacker to elevate privileges over a network.
CVE-2026-47632 1 Microsoft 1 Azure Monitor Agent Metrics Extension 2026-07-15 8.8 High
Improper certificate validation in Azure Monitor Agent allows an unauthorized attacker to elevate privileges over an adjacent network.
CVE-2026-50338 1 Microsoft 1 Azure Spring Apps 2026-07-14 8.2 High
Improper authentication in Azure Spring Apps allows an authorized attacker to elevate privileges over a network.
CVE-2026-58279 1 Microsoft 1 Azure Cyclecloud 2026-07-14 6.5 Medium
Missing authorization in Azure CycleCloud allows an authorized attacker to elevate privileges over a network.
CVE-2026-26145 1 Microsoft 1 Azure Synapse 2026-07-06 4.8 Medium
Improper access control in Azure Synapse allows an authorized attacker to elevate privileges over a network.
CVE-2026-45499 1 Microsoft 2 Azure Open-ai, Azure Open-ai 2026-07-06 9.9 Critical
Server-side request forgery (ssrf) in Azure OpenAI allows an authorized attacker to elevate privileges over a network.
CVE-2026-32174 1 Microsoft 1 Azure Ai Bot Service 2026-06-23 7.7 High
Improper authentication in Azure Bot Service allows an authorized attacker to elevate privileges over a network.
CVE-2026-48584 1 Microsoft 1 Azure Synapse 2026-06-22 9.9 Critical
Execution with unnecessary privileges in Azure Synapse allows an authorized attacker to elevate privileges over a network.
CVE-2026-45480 1 Microsoft 1 Azure Active Directory 2026-06-22 10 Critical
Improper authentication in Azure Active Directory allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-47633 1 Microsoft 2 Azure Cost Management, Azure Cost Management 2026-06-22 7.5 High
Exposure of sensitive information to an unauthorized actor in Cost Management Interactive Experiences allows an unauthorized attacker to disclose information over a network.