Export limit exceeded: 369524 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 369524 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 369524 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 369524 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 369524 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Expected end of text, found ':' (at char 33), (line:1, col:34)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (369524 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-16379 1 Mozilla 1 Firefox 2026-07-22 9.8 Critical
Privilege escalation in the DOM: Content Processes component. This vulnerability was fixed in Firefox 153 and Firefox ESR 140.13.
CVE-2026-62466 1 Oracle 1 Human Resources 2026-07-22 7.2 High
Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite (component: Data Removal Tool). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Human Resources. Successful attacks of this vulnerability can result in takeover of Oracle Human Resources. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).
CVE-2026-16358 1 Mozilla 1 Firefox 2026-07-22 9.8 Critical
Site isolation issue in the Graphics: WebRender component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, and Firefox ESR 140.13.
CVE-2026-16380 1 Mozilla 1 Firefox 2026-07-22 9.1 Critical
Mitigation bypass in the Networking component. This vulnerability was fixed in Firefox 153.
CVE-2026-16381 1 Mozilla 1 Firefox 2026-07-22 9.1 Critical
Same-origin policy bypass in the Networking: DNS component. This vulnerability was fixed in Firefox 153 and Firefox ESR 140.13.
CVE-2026-16382 1 Mozilla 1 Firefox 2026-07-22 9.8 Critical
Mitigation bypass in the DOM: Service Workers component. This vulnerability was fixed in Firefox 153.
CVE-2026-16157 2026-07-22 N/A
Duplicati v2.3.0.1 backup software gives Authenticated Users MODIFY permissions that propagate to all subdirectories. Installing the software outside of the Program Files directory, or on a custom path, creates a LocalSystem service running from a directory that any standard local user can write to. A standard local user can overwrite any DLL in the service directory. On service restart, the OS loads the attacker's DLL before any managed code runs, executing arbitrary code as SYSTEM.
CVE-2026-16384 1 Mozilla 1 Firefox 2026-07-22 7.5 High
Information disclosure due to uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153.
CVE-2026-16385 1 Mozilla 1 Firefox 2026-07-22 7.5 High
Information disclosure due to uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153.
CVE-2026-16386 1 Mozilla 1 Firefox 2026-07-22 7.5 High
Information disclosure due to uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153.
CVE-2026-16387 1 Mozilla 1 Firefox 2026-07-22 9.8 Critical
Site isolation issue in the Networking component. This vulnerability was fixed in Firefox 153 and Firefox ESR 140.13.
CVE-2023-52355 2 Libtiff, Redhat 5 Libtiff, Ai Inference Server, Discovery and 2 more 2026-07-22 7.5 High
An out-of-memory flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFRasterScanlineSize64() API. This flaw allows a remote attacker to cause a denial of service via a crafted input with a size smaller than 379 KB.
CVE-2026-16388 1 Mozilla 1 Firefox 2026-07-22 9.8 Critical
Sandbox escape in the DOM: Networking component. This vulnerability was fixed in Firefox 153.
CVE-2026-16389 1 Mozilla 1 Firefox 2026-07-22 9.8 Critical
Incorrect boundary conditions, integer overflow in the Libraries component in NSS. This vulnerability was fixed in Firefox 153.
CVE-2026-16390 1 Mozilla 1 Firefox 2026-07-22 9.1 Critical
Mitigation bypass in the Enterprise Policies component. This vulnerability was fixed in Firefox 153 and Firefox ESR 140.13.
CVE-2026-16391 1 Mozilla 1 Firefox 2026-07-22 7.5 High
Information disclosure in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 153 and Firefox ESR 140.13.
CVE-2026-16393 1 Mozilla 1 Firefox 2026-07-22 9.1 Critical
Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153.
CVE-2026-16398 1 Mozilla 1 Firefox 2026-07-22 7.5 High
Site isolation issue in the Graphics component. This vulnerability was fixed in Firefox 153.
CVE-2026-16399 2026-07-22 7.5 High
Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 153.
CVE-2026-16400 1 Mozilla 1 Firefox 2026-07-22 7.5 High
Information disclosure in the DOM: Security component. This vulnerability was fixed in Firefox 153.