CVE Database

55204+ vulnerabilities with CVSS scores, EPSS exploit predictions, and CISA KEV status. Updated daily.

Filter: All CRITICAL HIGH MEDIUM LOW CISA KEV
Sort: Newest CVSS EPSS
CVE-2026-100124
7.5 HIGH

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability …

Oct 13, 2026
CVE-2026-100123
7.5 HIGH

CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability …

Oct 13, 2026
CVE-2026-100122
7.5 HIGH

CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability …

Oct 13, 2026
CVE-2026-100121
7.5 HIGH

CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability …

Oct 13, 2026
CVE-2026-100120
7.5 HIGH

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability …

Oct 13, 2026
CVE-2026-100119
7.5 HIGH

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability …

Oct 13, 2026
CVE-2026-100118
7.5 HIGH

CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability …

Oct 13, 2026
CVE-2026-100117
7.5 HIGH

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability …

Oct 13, 2026
CVE-2026-100115
7.5 HIGH

CAI Content Credentials is affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability …

Oct 13, 2026
CVE-2026-100114
7.5 HIGH

CAI Content Credentials is affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability …

Oct 13, 2026
CVE-2026-100113
7.5 HIGH

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability …

Oct 13, 2026
CVE-2026-97312
7.8 HIGH

Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of …

Oct 13, 2026
CVE-2026-96956
8.0 HIGH

Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.

Oct 13, 2026
CVE-2026-96523
7.8 HIGH

Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of …

Oct 13, 2026
CVE-2026-96522
7.8 HIGH

Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of …

Oct 13, 2026
CVE-2026-96521
7.8 HIGH

Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of …

Oct 13, 2026
CVE-2026-95695
7.4 HIGH

IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow a remote attacker to bypass security restrictions due to incorrect authorization.

Oct 13, 2026
CVE-2026-95641
7.8 HIGH

Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of …

Oct 13, 2026
CVE-2026-95639
8.6 HIGH

Photoshop Desktop is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker …

Oct 13, 2026
CVE-2026-95638
7.8 HIGH

Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation …

Oct 13, 2026
CVE-2026-95637
7.8 HIGH

Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of …

Oct 13, 2026
CVE-2026-95636
7.8 HIGH

Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. …

Oct 13, 2026
CVE-2026-95635
7.8 HIGH

Photoshop Desktop is affected by a Double Free vulnerability that could result in arbitrary code execution in the context of the current user. An attacker …

Oct 13, 2026
CVE-2026-94512
8.8 HIGH

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-93905
8.2 HIGH

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 could allow an unauthenticated remote attacker to corrupt the persisted status of batch job instances.

Oct 13, 2026
CVE-2026-88088
7.0 HIGH

Integer overflow or wraparound in SQL Server allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-88083
7.5 HIGH

Stack-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-88082
7.0 HIGH

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-88081
7.7 HIGH

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

Oct 13, 2026
CVE-2026-85919
7.0 HIGH

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-85888
7.7 HIGH

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

Oct 13, 2026
CVE-2026-85886
8.5 HIGH

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-85876
7.0 HIGH

Use after free in SQL Server allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-83966
7.8 HIGH

Substance3D - Sampler is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation …

Oct 13, 2026
CVE-2026-83965
7.8 HIGH

Substance3D - Sampler is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. …

Oct 13, 2026
CVE-2026-83661
7.8 HIGH

Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. …

Oct 13, 2026
CVE-2026-76001
7.1 HIGH

ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain …

Oct 13, 2026
CVE-2026-75996
7.5 HIGH

ColdFusion is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, …

Oct 13, 2026
CVE-2026-75995
8.4 HIGH

ColdFusion is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An attacker …

Oct 13, 2026
CVE-2026-75748
7.6 HIGH

ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. An attacker with high privileges could exploit this vulnerability …

Oct 13, 2026
CVE-2026-71385
8.4 HIGH

ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with …

Oct 13, 2026
CVE-2026-68883
8.5 HIGH

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.

Oct 13, 2026
CVE-2026-67625
8.5 HIGH

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-65674
8.8 HIGH

Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network.

Oct 13, 2026
CVE-2026-62840
7.0 HIGH

Time-of-check time-of-use (toctou) race condition in Linux Kernel allows an authorized attacker to elevate privileges locally.

Oct 13, 2026
CVE-2026-34634
8.6 HIGH

ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue does not require user interaction. …

Oct 13, 2026
CVE-2026-34633
7.7 HIGH

ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain …

Oct 13, 2026
CVE-2026-106623
7.5 HIGH

ColdFusion is affected by an Incorrect Authorization vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive …

Oct 13, 2026
CVE-2026-106618
8.8 HIGH

ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker …

Oct 13, 2026
CVE-2026-106617
8.8 HIGH

ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker …

Oct 13, 2026

Scan your infrastructure for known CVEs

Free website and port scanning — find vulnerabilities before attackers do.

Patch and protect

Block known exploits with a web application firewall while you patch, keep your own devices clean, or test the fix on a fresh server.

Compare VPS prices →

Affiliate links: we may earn a commission, your price stays the same.