Export limit exceeded: 369970 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 10759 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 25569 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (25569 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2025-30386 1 Microsoft 10 365 Apps, 365 Copilot, Office and 7 more 2026-05-22 8.4 High
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-49696 1 Microsoft 10 365 Apps, 365 Copilot, Office and 7 more 2026-05-22 8.4 High
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-49695 1 Microsoft 10 365 Apps, 365 Copilot, Office and 7 more 2026-05-22 8.4 High
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-47164 1 Microsoft 10 365 Apps, 365 Copilot, Office and 7 more 2026-05-22 8.4 High
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-26134 1 Microsoft 2 365 Copilot, Office 2026-05-22 7.8 High
Integer overflow or wraparound in Microsoft Office allows an authorized attacker to elevate privileges locally.
CVE-2025-30388 1 Microsoft 29 365 Copilot, Office, Office Long Term Servicing Channel and 26 more 2026-05-22 7.8 High
Heap-based buffer overflow in Windows Win32K - GRFX allows an unauthorized attacker to execute code locally.
CVE-2023-36565 1 Microsoft 3 365 Copilot, Office, Office Long Term Servicing Channel 2026-05-22 7 High
Microsoft Office Graphics Elevation of Privilege Vulnerability
CVE-2023-23391 1 Microsoft 2 365 Copilot, Office 2026-05-22 5.5 Medium
Office for Android Spoofing Vulnerability
CVE-2024-38250 1 Microsoft 26 365 Copilot, Office, Office Long Term Servicing Channel and 23 more 2026-05-22 7.8 High
Windows Graphics Component Elevation of Privilege Vulnerability
CVE-2025-53732 1 Microsoft 2 365 Copilot, Office 2026-05-22 7.8 High
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-53766 1 Microsoft 30 365 Copilot, Gdi+, Gdiplus and 27 more 2026-05-22 9.8 Critical
Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network.
CVE-2025-49702 1 Microsoft 10 365 Apps, 365 Copilot, Office and 7 more 2026-05-22 7.8 High
Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-53799 1 Microsoft 26 365 Copilot, Office, Windows 10 1507 and 23 more 2026-05-22 5.5 Medium
Use of uninitialized resource in Windows Imaging Component allows an unauthorized attacker to disclose information locally.
CVE-2022-22709 1 Microsoft 1 Vp9 Video Extensions 2026-05-22 7.8 High
VP9 Video Extensions Remote Code Execution Vulnerability
CVE-2022-23282 1 Microsoft 1 Paint 3d 2026-05-22 7.8 High
Paint 3D Remote Code Execution Vulnerability
CVE-2022-24451 1 Microsoft 1 Vp9 Video Extensions 2026-05-22 7.8 High
VP9 Video Extensions Remote Code Execution Vulnerability
CVE-2022-24457 1 Microsoft 1 Heif Image Extension 2026-05-22 7.8 High
HEIF Image Extensions Remote Code Execution Vulnerability
CVE-2022-24501 1 Microsoft 1 Vp9 Video Extensions 2026-05-22 7.8 High
VP9 Video Extensions Remote Code Execution Vulnerability
CVE-2005-1794 1 Microsoft 2 Remote Desktop Connection, Windows Terminal Services Using Rdp 2026-05-22 7.4 High
Microsoft Terminal Server using Remote Desktop Protocol (RDP) 5.2 stores an RSA private key in mstlsapi.dll and uses it to sign a certificate, which allows remote attackers to spoof public keys of legitimate servers and conduct man-in-the-middle attacks.
CVE-2026-2812 3 Esri, Linux, Microsoft 3 Arcgis Server, Linux Kernel, Windows 2026-05-21 5.3 Medium
ArcGIS Server contains an improper authentication vulnerability in an undocumented administrative endpoint. An unauthenticated attacker could exploit this issue by sending a crafted request to the endpoint. Successful exploitation may result in disruption of the web-based browsing interface. This issue affects ArcGIS Server 12.0 and earlier.