CVE Vulnerability Database
Search and browse 424,261 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-104875 | HIGH | 7.1 | 0.3% | Oct 13, 2026 | Ente provides end-to-end encrypted cloud services and security tools. Prior to server image 2026.07.09, the POST /emerge... |
| CVE-2026-104817 | HIGH | 8.7 | 0.5% | Oct 13, 2026 | Misskey is an open source, federated social media platform. From 12.112.1 until 2026.7.0, the unauthenticated fetch-rss ... |
| CVE-2026-104816 | HIGH | 8.5 | 0.6% | Oct 13, 2026 | Misskey is an open source, federated social media platform. From 12.0.0 until 2026.7.0, the RSS components display feed ... |
| CVE-2026-104584 | CRITICAL | 9.8 | 0.7% | Oct 13, 2026 | reNgine up to v2.2.0 and current master branch (commit de4199222cca5618f1255930ce78987e47d43a99) is vulnerable to OS Com... |
| CVE-2026-104344 | HIGH | 7.8 | 0.3% | Oct 13, 2026 | Adobe Framemaker is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution... |
| CVE-2026-104343 | MEDIUM | 5.5 | 0.2% | Oct 13, 2026 | Adobe Framemaker is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-s... |
| CVE-2026-104342 | HIGH | 7.8 | 0.4% | Oct 13, 2026 | Adobe Framemaker is affected by a Use After Free vulnerability that could result in arbitrary code execution in the cont... |
| CVE-2026-104341 | HIGH | 7.8 | 0.2% | Oct 13, 2026 | Adobe Framemaker is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in th... |
| CVE-2026-104340 | HIGH | 7.8 | 0.3% | Oct 13, 2026 | Adobe Framemaker is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution... |
| CVE-2026-103967 | HIGH | 7.8 | 0.2% | Oct 13, 2026 | Adobe Framemaker is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in th... |
| CVE-2026-103966 | HIGH | 7.8 | 0.2% | Oct 13, 2026 | Adobe Framemaker is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution... |
| CVE-2026-103937 | HIGH | 8.7 | 0.5% | Oct 13, 2026 | Misskey is an open source, federated social media platform. From 13.0.0 until 2025.4.1 and from 2025.5.0 until 2026.7.0,... |
| CVE-2026-103857 | MEDIUM | 5.5 | 0.2% | Oct 13, 2026 | Adobe Framemaker is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. A... |
| CVE-2026-103856 | MEDIUM | 5.5 | 0.3% | Oct 13, 2026 | Adobe Framemaker is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. A... |
| CVE-2026-103849 | CRITICAL | 10 | 0.8% | Oct 13, 2026 | Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability tha... |
| CVE-2026-103578 | MEDIUM | 6.8 | 0.5% | Oct 13, 2026 | Untrusted pointer dereference in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical at... |
| CVE-2026-103577 | HIGH | 7.5 | 0.6% | Oct 13, 2026 | Insecure default variable initialization in Microsoft QUIC allows an unauthorized attacker to bypass a security feature ... |
| CVE-2026-103576 | MEDIUM | 6.5 | 0.9% | Oct 13, 2026 | Url redirection to untrusted site ('open redirect') in Active Directory Federation Services (AD FS) allows an unauthoriz... |
| CVE-2026-103575 | HIGH | 8.8 | 0.9% | Oct 13, 2026 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
| CVE-2026-103572 | HIGH | 8.8 | — | Oct 13, 2026 | Improper control of generation of code ('code injection') in Visual Studio Tools for Applications and SQL Server Managem... |
| CVE-2026-103569 | HIGH | 7.5 | 1.1% | Oct 13, 2026 | Out-of-bounds read in Windows IKE Extension allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-103568 | HIGH | 7.8 | 0.2% | Oct 13, 2026 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Credential Provid... |
| CVE-2026-103567 | MEDIUM | 5.5 | 0.4% | Oct 13, 2026 | Buffer over-read in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally. |
| CVE-2026-103565 | HIGH | 7 | 0.3% | Oct 13, 2026 | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-103560 | MEDIUM | 5.5 | 0.3% | Oct 13, 2026 | Improper authorization in DNS Server allows an authorized attacker to perform tampering locally. |