Export limit exceeded: 425081 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 425081 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (425081 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-121368 | 1 Arista | 1 Eos | 2026-11-12 | 8.6 High |
| On affected platforms running Arista EOS with Bidirectional Forwarding Detection (BFD) configured to use keyed MD5 or keyed SHA1 authentication, an unauthenticated attacker with network adjacency (direct or multi-hop) to a BFD-enabled interface can send a specially crafted BFD packet resulting in a system reboot. | ||||
| CVE-2026-70642 | 2026-11-12 | 4.3 Medium | ||
| ToolJet before 3.21.94, fixed in commit e5f387a, contains an authorization bypass vulnerability in the app environments init endpoint that allows authenticated users to read app version metadata belonging to other workspaces. Attackers can send GET requests to /api/app-environments/init with an editing_version_id from another workspace to retrieve the version name, description, status, current environment ID, and app ID, because the lookup is not scoped to the caller's organization. | ||||
| CVE-2026-122474 | 1 Microsoft | 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more | 2026-11-12 | 5.9 Medium |
| Time-of-check time-of-use (toctou) race condition in Windows Security Account Manager allows an unauthorized attacker to bypass a security feature over a network. | ||||
| CVE-2026-122174 | 1 Microsoft | 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more | 2026-11-12 | 7 High |
| Improper link resolution before file access ('link following') in Windows Task Scheduler allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-122168 | 1 Microsoft | 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more | 2026-11-12 | 7.8 High |
| Heap-based buffer overflow in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-122167 | 1 Microsoft | 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more | 2026-11-12 | 6.8 Medium |
| Heap-based buffer overflow in Windows USB Driver allows an unauthorized attacker to elevate privileges with a physical attack. | ||||
| CVE-2026-121674 | 1 Microsoft | 2 Powershell, Powershell 7.7 | 2026-11-12 | 6.1 Medium |
| Insertion of sensitive information into sent data in Microsoft PowerShell Core allows an unauthorized attacker to disclose information over a network. | ||||
| CVE-2026-121671 | 1 Microsoft | 9 Windows 10 21h2, Windows 10 22h2, Windows 11 23h2 and 6 more | 2026-11-12 | 7 High |
| Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-121670 | 1 Microsoft | 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more | 2026-11-12 | 7 High |
| Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-124210 | 1 Microsoft | 1 Sharepoint Server | 2026-11-12 | 6.5 Medium |
| Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network. | ||||
| CVE-2026-123391 | 1 Microsoft | 1 Sharepoint Server | 2026-11-12 | 8.8 High |
| Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. | ||||
| CVE-2026-122988 | 1 Microsoft | 1 Windows Admin Center | 2026-11-12 | 8 High |
| Improper authorization in Windows Admin Center allows an authorized attacker to elevate privileges over a network. | ||||
| CVE-2026-124183 | 1 Microsoft | 6 365 Apps, Office 2021, Office 2024 and 3 more | 2026-11-12 | 6.5 Medium |
| Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. | ||||
| CVE-2026-124179 | 1 Microsoft | 6 365 Apps, Office 2021, Office 2024 and 3 more | 2026-11-12 | 6.5 Medium |
| Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. | ||||
| CVE-2026-124178 | 1 Microsoft | 6 365 Apps, Office 2021, Office 2024 and 3 more | 2026-11-12 | 6.5 Medium |
| Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. | ||||
| CVE-2026-123395 | 1 Microsoft | 6 365 Apps, Office 2021, Office 2024 and 3 more | 2026-11-12 | 5.9 Medium |
| Improper control of generation of code ('code injection') in Microsoft Office Excel allows an authorized attacker to disclose information locally. | ||||
| CVE-2026-120783 | 1 Microsoft | 1 Azure Devops Server 2025 | 2026-11-12 | 6.4 Medium |
| Weak authentication in Azure DevOps Server allows an authorized attacker to elevate privileges over a network. | ||||
| CVE-2026-124233 | 1 Microsoft | 6 365 Apps, Office 2021, Office 2024 and 3 more | 2026-11-12 | 6.5 Medium |
| Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. | ||||
| CVE-2026-122987 | 1 Microsoft | 2 Microsoft Hpc Pack 2016, Microsoft Hpc Pack 2019 | 2026-11-12 | 5.9 Medium |
| Missing authentication for critical function in Microsoft High Performance Computing (HPC) Pack allows an unauthorized attacker to elevate privileges over a network. | ||||
| CVE-2026-122986 | 1 Microsoft | 1 Kernel-mshv-6.6.137.mshv2-2.azl3.x86 64 | 2026-11-12 | 7.8 High |
| Improper privilege management in Microsoft Azure Kubernetes Service allows an authorized attacker to elevate privileges locally. | ||||