Vulnerability intelligence

Explore. Understand.
Stay ahead.

A clearer way to explore known software vulnerabilities. Search CVE records, review severity and CVSS scores, and keep track of the issues that matter to you.

Independent vulnerability information and monitoring project

Search the vulnerability database

Find a CVE by ID, keyword, severity or CVSS score.

Centralized CVE data
Browse vulnerability records collected from public sources.
Severity at a glance
Compare severity levels and available CVSS scores.
Personal email alerts
Create alert preferences for critical issues and custom matches.
Browse the database

Latest vulnerability records

52 915
matching records · page 695 of 2117
CVE-2026-103837 HIGH CVSS 7.83.1

Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Published: 13 Oct 2026 Updated: 19 Oct 2026 View details →
CVE-2026-103836 HIGH CVSS 7.83.1

Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Published: 13 Oct 2026 Updated: 19 Oct 2026 View details →
CVE-2026-103835 HIGH CVSS 7.83.1

Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Published: 13 Oct 2026 Updated: 19 Oct 2026 View details →
CVE-2026-103834 HIGH CVSS 7.83.1

Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Published: 13 Oct 2026 Updated: 19 Oct 2026 View details →
CVE-2026-103833 HIGH CVSS 7.83.1

Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Published: 13 Oct 2026 Updated: 19 Oct 2026 View details →
CVE-2026-103832 HIGH CVSS 7.83.1

Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Published: 13 Oct 2026 Updated: 19 Oct 2026 View details →
CVE-2026-103830 HIGH CVSS 7.83.1

Substance3D - Stager is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Published: 13 Oct 2026 Updated: 19 Oct 2026 View details →
CVE-2026-102855 HIGH CVSS 8.83.1

Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.

Published: 13 Oct 2026 Updated: 20 Oct 2026 View details →
CVE-2026-102238 CRITICAL CVSS 9.63.1

Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an unauthorized attacker to execute code over a network.

Published: 13 Oct 2026 Updated: 10 Nov 2026 View details →
CVE-2026-102235 HIGH CVSS 8.83.1

Improper encoding or escaping of output in Visual Studio Code allows an unauthorized attacker to execute code over a network.

Published: 13 Oct 2026 Updated: 10 Nov 2026 View details →
CVE-2026-102234 HIGH CVSS 7.53.1

Reliance on untrusted inputs in a security decision in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.

Published: 13 Oct 2026 Updated: 10 Nov 2026 View details →
CVE-2026-97783 MEDIUM CVSS 6.13.1

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.

Published: 13 Oct 2026 Updated: 21 Oct 2026 View details →
CVE-2026-97782 MEDIUM CVSS 6.83.1

Observable discrepancy in Microsoft Office SharePoint allows an authorized attacker to perform tampering over a network.

Published: 13 Oct 2026 Updated: 30 Oct 2026 View details →
CVE-2026-96960 HIGH CVSS 7.53.1

Asymmetric resource consumption (amplification) in .NET allows an unauthorized attacker to deny service over a network.

Published: 13 Oct 2026 Updated: 22 Oct 2026 View details →
CVE-2026-96959 HIGH CVSS 7.53.1

Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.

Published: 13 Oct 2026 Updated: 22 Oct 2026 View details →
CVE-2026-96958 HIGH CVSS 7.53.1

Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.

Published: 13 Oct 2026 Updated: 22 Oct 2026 View details →
CVE-2026-96957 HIGH CVSS 8.83.1

Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.

Published: 13 Oct 2026 Updated: 22 Oct 2026 View details →
CVE-2026-96951 HIGH CVSS 8.83.1

Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.

Published: 13 Oct 2026 Updated: 29 Oct 2026 View details →
CVE-2026-96914 HIGH CVSS 8.83.1

Integer overflow or wraparound in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 22 Oct 2026 View details →
CVE-2026-96913 HIGH CVSS 7.83.1

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 22 Oct 2026 View details →
CVE-2026-96912 HIGH CVSS 7.83.1

Use after free in Windows Client License Service allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 22 Oct 2026 View details →
CVE-2026-96911 HIGH CVSS 7.83.1

Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 22 Oct 2026 View details →
CVE-2026-96910 MEDIUM CVSS 5.53.1

Untrusted pointer dereference in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.

Published: 13 Oct 2026 Updated: 26 Oct 2026 View details →
CVE-2026-96868 HIGH CVSS 7.03.1

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

Published: 13 Oct 2026 Updated: 26 Oct 2026 View details →
CVE-2026-96867 HIGH CVSS 7.83.1

Out-of-bounds read in Windows NTFS allows an authorized attacker to execute code locally.

Published: 13 Oct 2026 Updated: 26 Oct 2026 View details →