Vulnerability index

Browse CVEs

10,000+ matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Edge Chromium HIGH 7.4
CVE-2026-41107

External control of file name or path in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.

Fix: 148.0.3967.55+
Fix from $1,950 2026-05-12
Visual Studio Code MEDIUM 5.0
CVE-2026-41610

Improper neutralization of input during web page generation ('cross-site scripting') in Visual Studio Code allows an unauthorized attacker to bypass …

Fix: 1.119.1+
Fix from $1,600 2026-05-12
Windows 11 23h2 CRITICAL 9.8
CVE-2026-41096

Heap-based buffer overflow in Microsoft Windows DNS allows an unauthorized attacker to execute code over a network.

Fix: 10.0.22631.7079 / 10.0.25398.2330+
Fix from $2,300 2026-05-12
Confluence Saml Sso CRITICAL 9.1
CVE-2026-41103EPSS 5%

Incorrect implementation of authentication algorithm in Microsoft SSO Plugin for Jira & Confluence allows an unauthorized attacker to elevate pri…

Fix: 1.3.3 / 7.4.0+
Fix from $2,300 2026-05-12
Windows Server 2012 HIGH 7.8
CVE-2026-41095

Use after free in Data Deduplication allows an authorized attacker to elevate privileges locally.

Fix: 10.0.14393.9140 / 10.0.17763.8755+
Fix from $1,950 2026-05-12
Windows 10 1809 MEDIUM 6.7
CVE-2026-41097

Reliance on a component that is not updateable in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.

Fix: 10.0.17763.8755 / 10.0.19044.7291+
Fix from $1,600 2026-05-12
Word MEDIUM 5.5
CVE-2026-41101

Improper access control in Microsoft Office Word allows an authorized attacker to perform spoofing locally.

Fix: 16.0.19822.20190+
Fix from $1,600 2026-05-12
Powerpoint MEDIUM 5.5
CVE-2026-41102

Improper access control in Microsoft Office PowerPoint allows an authorized attacker to perform spoofing locally.

Fix: 16.0.19822.20190+
Fix from $1,600 2026-05-12
Windows Server 2012 CRITICAL 9.8
CVE-2026-41089EPSS 80%

Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network.

Fix: 10.0.14393.9140 / 10.0.17763.8755+
Fix from $2,300 2026-05-12
365 Apps HIGH 8.8
CVE-2026-40420

Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally.

Mitigation only
Fix from $1,950 2026-05-12
Windows Admin Center HIGH 8.8
CVE-2026-41086

Improper access control in Windows Admin Center allows an authorized attacker to elevate privileges over a network.

Fix: 2.6.7+
Fix from $1,950 2026-05-12
Data Formulator HIGH 8.8
CVE-2026-41094

Improper control of generation of code ('code injection') in Microsoft Data Formulator allows an unauthorized attacker to execute code over a network.

Fix: 0.7+
Fix from $1,950 2026-05-12
365 Apps HIGH 7.8
CVE-2026-40419

Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally.

Mitigation only
Fix from $1,950 2026-05-12
Windows 10 21h2 HIGH 7.8
CVE-2026-41088

Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to eleva…

Fix: 10.0.19044.7291 / 10.0.19045.7291+
Fix from $1,950 2026-05-12
Windows 10 1809 HIGH 8.1
CVE-2026-40415

Use after free in Windows TCP/IP allows an unauthorized attacker to execute code over a network.

Fix: 10.0.17763.8755 / 10.0.19044.7291+
Fix from $1,950 2026-05-12
Dynamics 365 Business Central HIGH 7.8
CVE-2026-40417

Weak authentication in Dynamics Business Central allows an authorized attacker to elevate privileges locally.

Mitigation only
Fix from $1,950 2026-05-12
365 Apps HIGH 7.8
CVE-2026-40418

Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally.

Mitigation only
Fix from $1,950 2026-05-12
Windows 10 1607 HIGH 7.4
CVE-2026-40413

Windows TCP/IP Denial of Service Vulnerability

Fix: 10.0.14393.9140 / 10.0.17763.8755+
Fix from $1,950 2026-05-12
Windows 10 1607 HIGH 7.4
CVE-2026-40414

Windows TCP/IP Denial of Service Vulnerability

Fix: 10.0.14393.9140 / 10.0.17763.8755+
Fix from $1,950 2026-05-12
Windows 11 23h2 CRITICAL 9.3
CVE-2026-40402

Use after free in Windows Hyper-V allows an unauthorized attacker to elevate privileges locally.

Fix: 10.0.20348.5074 / 10.0.22631.7079+
Fix from $2,300 2026-05-12
Windows 10 1607 HIGH 8.8
CVE-2026-40403

Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to execute code locally.

Fix: 10.0.14393.9140 / 10.0.17763.8755+
Fix from $1,950 2026-05-12
Windows 10 1607 HIGH 7.8
CVE-2026-40407

Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

Fix: 10.0.14393.9140 / 10.0.17763.8755+
Fix from $1,950 2026-05-12
Windows 10 1607 HIGH 7.8
CVE-2026-40408

Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.

Fix: 10.0.14393.9140 / 10.0.17763.8755+
Fix from $1,950 2026-05-12
Windows 11 24h2 HIGH 7.5
CVE-2026-40405

Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service over a network.

Fix: 10.0.26100.8390 / 10.0.26100.32772+
Fix from $1,950 2026-05-12
Windows 10 1607 HIGH 7.5
CVE-2026-40406

Use after free in Windows TCP/IP allows an unauthorized attacker to disclose information over a network.

Fix: 10.0.14393.9140 / 10.0.17763.8755+
Fix from $1,950 2026-05-12
Windows 10 1607 HIGH 7.0
CVE-2026-40410

Use after free in Windows SMB Client allows an authorized attacker to elevate privileges locally.

Fix: 10.0.14393.9140 / 10.0.17763.8755+
Fix from $1,950 2026-05-12
Windows 10 1607 HIGH 7.8
CVE-2026-40382

Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

Fix: 10.0.14393.9140 / 10.0.17763.8755+
Fix from $1,950 2026-05-12
Windows 10 1607 HIGH 7.8
CVE-2026-40397

Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

Fix: 10.0.14393.9140 / 10.0.17763.8755+
Fix from $1,950 2026-05-12
Windows 10 1607 HIGH 7.8
CVE-2026-40398

Heap-based buffer overflow in Windows Remote Desktop allows an authorized attacker to elevate privileges locally.

Fix: 10.0.14393.9140 / 10.0.17763.8755+
Fix from $1,950 2026-05-12
Windows 10 1607 HIGH 7.8
CVE-2026-40399

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an authorized attacker to elevat…

Fix: 10.0.14393.9140 / 10.0.17763.8755+
Fix from $1,950 2026-05-12