Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (1053 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2025-59781 1 F5 24 Big-ip, Big-ip Access Policy Manager, Big-ip Advanced Firewall Manager and 21 more 2026-02-26 7.5 High
When DNS cache is configured on a BIG-IP or BIG-IP Next CNF virtual server, undisclosed DNS queries can cause an increase in memory resource utilization.   Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVE-2025-20771 2 Google, Mediatek 32 Android, Mt2718, Mt6739 and 29 more 2026-02-26 6.7 Medium
In display, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10196993; Issue ID: MSV-4802.
CVE-2025-58071 1 F5 24 Big-ip, Big-ip Access Policy Manager, Big-ip Advanced Firewall Manager and 21 more 2026-02-26 7.5 High
When IPsec is configured on the BIG-IP system, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVE-2025-36935 1 Google 1 Android 2026-02-26 7.8 High
In trusty_ffa_mem_reclaim of shared-mem-smcall.c, there is a possible memory corruption due to uninitialized data. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2023-31275 1 Kingsoft 1 Wps Office 2026-02-25 8.8 High
An uninitialized pointer use vulnerability exists in the functionality of WPS Office 11.2.0.11537 that handles Data elements in an Excel file. A specially crafted malformed file can lead to remote code execution. An attacker can provide a malicious file to trigger this vulnerability.
CVE-2025-47963 1 Microsoft 1 Edge Chromium 2026-02-20 6.3 Medium
No cwe for this issue in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
CVE-2025-47964 1 Microsoft 2 Edge, Edge Chromium 2026-02-20 5.4 Medium
Microsoft Edge (Chromium-based) Spoofing Vulnerability
CVE-2025-21262 1 Microsoft 1 Edge Chromium 2026-02-13 5.4 Medium
User Interface (UI) Misrepresentation of Critical Information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network
CVE-2025-21314 1 Microsoft 18 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 15 more 2026-02-13 6.5 Medium
Windows SmartScreen Spoofing Vulnerability
CVE-2025-21253 1 Microsoft 1 Edge 2026-02-13 5.3 Medium
Microsoft Edge for IOS and Android Spoofing Vulnerability
CVE-2025-21404 1 Microsoft 1 Edge Chromium 2026-02-13 4.3 Medium
Microsoft Edge (Chromium-based) Spoofing Vulnerability
CVE-2025-21259 1 Microsoft 2 Outlook, Outlook 2016 2026-02-13 5.3 Medium
Microsoft Outlook Spoofing Vulnerability
CVE-2025-29796 1 Microsoft 1 Edge 2026-02-13 4.7 Medium
User interface (ui) misrepresentation of critical information in Microsoft Edge for iOS allows an unauthorized attacker to perform spoofing over a network.
CVE-2025-29825 1 Microsoft 1 Edge Chromium 2026-02-13 6.5 Medium
User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
CVE-2025-49755 2 Google, Microsoft 2 Android, Edge 2026-02-13 4.3 Medium
User interface (ui) misrepresentation of critical information in Microsoft Edge for Android allows an unauthorized attacker to perform spoofing over a network.
CVE-2025-58466 2 Qnap, Qnap Systems 4 Qts, Quts Hero, Qts and 1 more 2026-02-12 4.9 Medium
A use of uninitialized variable vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to denial of service conditions, or modify control flow in unexpected ways. We have already fixed the vulnerability in the following versions: QTS 5.2.8.3332 build 20251128 and later QuTS hero h5.2.8.3321 build 20251117 and later
CVE-2024-38112 1 Microsoft 22 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 19 more 2026-02-10 7.5 High
Windows MSHTML Platform Spoofing Vulnerability
CVE-2025-15331 1 Tanium 2 Connect, Service Connect 2026-02-10 4.3 Medium
Tanium addressed an uncontrolled resource consumption vulnerability in Connect.
CVE-2025-47348 1 Qualcomm 409 Aqt1000, Aqt1000 Firmware, Ar8035 and 406 more 2026-01-28 7.8 High
Memory corruption while processing identity credential operations in the trusted application.
CVE-2025-64775 1 Apache 1 Struts 2026-01-26 7.5 High
Denial of Service vulnerability in Apache Struts, file leak in multipart request processing causes disk exhaustion. This issue affects Apache Struts: from 2.0.0 through 6.7.0, from 7.0.0 through 7.0.3. Users are recommended to upgrade to version 6.8.0 or 7.1.1, which fixes the issue.