CVE Vulnerability Database
Search and browse 424,261 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-100203 | HIGH | 7 | 0.3% | Oct 13, 2026 | Heap-based buffer overflow in Windows Update Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-100202 | CRITICAL | 9.8 | 1.0% | Oct 13, 2026 | Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network. |
| CVE-2026-100201 | HIGH | 7 | 0.3% | Oct 13, 2026 | Heap-based buffer overflow in Windows Client License Service allows an authorized attacker to elevate privileges locally... |
| CVE-2026-100200 | HIGH | 7 | 0.3% | Oct 13, 2026 | Use after free in Windows Update Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-100133 | CRITICAL | 9.3 | 0.9% | Oct 13, 2026 | Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to i... |
| CVE-2026-95502 | MEDIUM | 5.3 | 0.4% | Oct 13, 2026 | A Git server that Grafana's Git Sync (provisioning) is configured to use can exhaust Grafana's memory by returning overs... |
| CVE-2026-93294 | MEDIUM | 6.3 | 0.3% | Oct 13, 2026 | A user with query access to an Azure Monitor data source can use its resource proxy to call Azure Resource Manager APIs ... |
| CVE-2026-92892 | CRITICAL | 9 | 0.3% | Oct 13, 2026 | Potential arbitrary code execution under specific configurations. Updated October 22, 2026: Affected versions now includ... |
| CVE-2026-52394 | CRITICAL | 9.1 | 0.4% | Oct 13, 2026 | DeepSeek V4 is vulnerable to Incorrect Access Control via a crafted input. |
| CVE-2026-37107 | CRITICAL | 9.8 | 0.6% | Oct 13, 2026 | An issue in HTMLy v.3.1.1 allows a remote attacker to escalate privileges via the get_feed function in the admin.php com... |
| CVE-2026-33374 | MEDIUM | 6.5 | 0.4% | Oct 13, 2026 | The Prometheus rule conversion API endpoints in Grafana do not limit request body size, allowing authenticated users to ... |
| CVE-2026-23707 | HIGH | 7.2 | 0.3% | Oct 13, 2026 | An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerabi... |
| CVE-2026-23706 | MEDIUM | 6.5 | 0.3% | Oct 13, 2026 | An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerabi... |
| CVE-2026-23705 | HIGH | 7.2 | 0.3% | Oct 13, 2026 | An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerabi... |
| CVE-2026-15577 | MEDIUM | 6.5 | 0.3% | Oct 13, 2026 | A user or service account with read-only access to Git Sync (provisioning) connections can modify a connection's configu... |
| CVE-2026-108385 | HIGH | 8.8 | 0.4% | Oct 13, 2026 | dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates ... |
| CVE-2026-108384 | HIGH | 8.8 | 0.3% | Oct 13, 2026 | dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates ... |
| CVE-2026-108383 | HIGH | 8.8 | 0.3% | Oct 13, 2026 | dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates ... |
| CVE-2026-108382 | HIGH | 8.8 | 0.4% | Oct 13, 2026 | dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates ... |
| CVE-2026-108381 | HIGH | 8.8 | 0.3% | Oct 13, 2026 | dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates ... |
| CVE-2026-108380 | HIGH | 8.8 | 0.4% | Oct 13, 2026 | dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates ... |
| CVE-2026-108379 | HIGH | 8.8 | 0.3% | Oct 13, 2026 | dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates ... |
| CVE-2026-108378 | HIGH | 8.8 | 0.3% | Oct 13, 2026 | dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates ... |
| CVE-2026-108377 | HIGH | 8.8 | 0.4% | Oct 13, 2026 | dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates ... |
| CVE-2026-108376 | HIGH | 8.8 | 0.4% | Oct 13, 2026 | dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates ... |