CVE Vulnerability Database
Search and browse 424,998 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-83947 | MEDIUM | 6.5 | 0.4% | Oct 8, 2026 | Missing authorization in Azure Event Grid allows an authorized attacker to perform spoofing over a network. |
| CVE-2026-83943 | HIGH | 8.7 | 0.5% | Oct 8, 2026 | Exposure of sensitive information to an unauthorized actor in Azure API Center allows an unauthorized attacker to disclo... |
| CVE-2026-78669 | HIGH | 7.5 | 0.2% | Oct 8, 2026 | A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams... |
| CVE-2026-78667 | HIGH | 7.5 | 0.2% | Oct 8, 2026 | When parsing a Range header containing a large number of small ranges, FileServer(FS), ServeContent, and ServeFile(FS) c... |
| CVE-2026-78663 | CRITICAL | 9.1 | 0.2% | Oct 8, 2026 | The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream (... |
| CVE-2026-78660 | HIGH | 7.5 | 0.2% | Oct 8, 2026 | Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cann... |
| CVE-2026-78659 | HIGH | 7.5 | 0.2% | Oct 8, 2026 | When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.T... |
| CVE-2026-77900 | CRITICAL | 9.8 | 0.5% | Oct 8, 2026 | Missing authentication for critical function in Azure App Service allows an unauthorized attacker to execute code over a... |
| CVE-2026-69435 | HIGH | 8.1 | 0.4% | Oct 8, 2026 | Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-56866 | HIGH | 7.5 | 0.2% | Oct 8, 2026 | When http.Transport sends an HTTP/1 CONNECT request with a non-empty Request.Body, it writes the body directly to the co... |
| CVE-2026-56857 | CRITICAL | 9.8 | 0.2% | Oct 8, 2026 | On Windows, when the target of Root.Mkdir or Root.MkdirAll is a junction pointing to an empty location, the operation ca... |
| CVE-2026-107802 | HIGH | 7.1 | 0.1% | Oct 8, 2026 | SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, src/SelectionTranslate.cpp embeds selected or pas... |
| CVE-2026-107738 | MEDIUM | 6.8 | 0.1% | Oct 8, 2026 | SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, ChmFile::GetCharZ() narrows file-controlled unsig... |
| CVE-2026-107737 | MEDIUM | 5.7 | 0.1% | Oct 8, 2026 | SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, and in pre-release 3.7.0.20369 when WebView2 is a... |
| CVE-2026-107736 | MEDIUM | 6.8 | 0.1% | Oct 8, 2026 | SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, MaybeFlipBitmap() asks GDI+ to read the attacker-... |
| CVE-2026-107735 | MEDIUM | 5.4 | 0.1% | Oct 8, 2026 | SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, InitializePolicies() starts the sumatrapdfrestric... |
| CVE-2026-107734 | HIGH | 7.1 | 0.1% | Oct 8, 2026 | SumatraPDF is a multi-format reader for Windows. In 3.5.2 and earlier, an attacker-controlled SyncTeX source filename is... |
| CVE-2026-107733 | MEDIUM | 6.8 | 0.1% | Oct 8, 2026 | SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, FrameOnCommand() handles CmdExec by passing a nul... |
| CVE-2026-107732 | HIGH | 8.4 | 0.1% | Oct 8, 2026 | SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, untrusted document paths and PDF link targets are... |
| CVE-2026-107731 | MEDIUM | 5.5 | 0.1% | Oct 8, 2026 | SumatraPDF is a multi-format reader for Windows. In 3.7.0.22298, four independently reachable range-validation variants ... |
| CVE-2026-107730 | MEDIUM | 5.5 | 0.1% | Oct 8, 2026 | SumatraPDF is a multi-format reader for Windows. In 3.7.0.22298, LitParseHeader() in src/LitDoc.cpp computes the attacke... |
| CVE-2026-107729 | MEDIUM | 5.5 | 0.1% | Oct 8, 2026 | SumatraPDF is a multi-format reader for Windows. In 3.7.0.22298, src/MobiDoc.cpp narrows the untrusted unsigned mobiHdr.... |
| CVE-2026-107728 | HIGH | 7.5 | 0.4% | Oct 8, 2026 | Strawberry GraphQL is a library for creating GraphQL APIs. From 0.217.0 until 0.326.1, PermissionExtension.resolve() on ... |
| CVE-2026-107727 | LOW | 3.7 | 0.4% | Oct 8, 2026 | Strawberry GraphQL is a library for creating GraphQL APIs. From 0.312.3 until 0.327.2, the legacy graphql-ws subscriptio... |
| CVE-2026-107651 | MEDIUM | 5.5 | 0.2% | Oct 8, 2026 | A flaw was found in Eye of GNOME (eog). A heap-based buffer overflow exists in the PNG metadata reader due to improper s... |