Export limit exceeded: 30292 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 30,292

Export CSV
CVE-2026-91792

Foxit PDF Editor/Reader Annotation Use-After-Free Remote Code Execution Vulnerability

When processing a specially crafted PDF, Foxit PDF Editor/Reader may perform reentrant zoom and layout operations through page- and annotation-related JavaScript actions. This can cause the application to access page objects after they have been released, resulting in a use-after-free condition and an application crash.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Foxit Foxitsoftware Microsoft
Products
Pdf Editor Pdf Reader Foxit Pdf Editor and 2 more
CVE-2026-106183

chromium-browser: Missing authorization in Chromoting

Missing authorization in Chromoting in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via crafted network traffic. (Chromium security severity: Medium)

CVSS 3.1 · 5.9 Medium EPSS < 1% KEV · Not listed
Vendors
Google Microsoft
Products
Chrome Windows
CVE-2026-106186

chromium-browser: chromium-browser: Uncontrolled search path element in CredentialProvider

Uncontrolled search path element in CredentialProvider in Google Chrome on on Windows prior to 155.0.8059.39 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program. (Chromium security severity: Low)

CVSS 3.1 · 8.6 High EPSS < 1% KEV · Not listed
Vendors
Google Microsoft
Products
Chrome Windows
CVE-2026-91791

Foxit PDF Editor/Reader Annotation Use-After-Free Remote Code Execution Vulnerability

When processing a specially crafted PDF file, Foxit PDF Editor/Reader may encounter a reentrant execution condition involving JavaScript triggered by page-visibility events. This can cause the application to access a released page-view object while calculating annotation boundaries, resulting in an invalid memory read and application crash.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Foxit Foxitsoftware Microsoft
Products
Pdf Editor Pdf Reader Foxit Pdf Editor and 2 more
CVE-2026-91790

Foxit PDF Editor/Reader Doc Object Use-After-Free Information Disclosure Vulnerability

When rendering the page image, Foxit PDF Editor/Reader fails to perform validation on image objects whose optional content attributes are malformed. As a result, the program may access an already-freed internal data structure, triggering a crash due to UAF.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Foxit Foxitsoftware Microsoft
Products
Pdf Editor Pdf Reader Foxit Pdf Editor and 2 more
CVE-2026-91789

Foxit PDF Editor/Reader U3D File Parsing Integer Overflow Remote Code Execution Vulnerability

Foxit PDF Editor/Reader’s U3D/GIF texture decoding path contained insufficient validation of image dimensions and related size information. Under certain conditions, this could lead to an incorrectly sized memory allocation and a subsequent out-of-bounds write during pixel processing, potentially resulting in remote code execution.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Foxit Foxitsoftware Microsoft
Products
Pdf Editor Pdf Reader Foxit Pdf Editor and 2 more
CVE-2026-91806

Foxit PDF Editor/Reader Doc Object Use-After-Free Information Disclosure Vulnerability

A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s handling of PDF form fields. Embedded JavaScript may access form-field references after the corresponding fields have been released, resulting in an application crash.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Foxit Foxitsoftware Microsoft
Products
Pdf Editor Pdf Reader Foxit Pdf Editor and 2 more
CVE-2026-91805

Use-after-free Vulnerability in Foxit PDF Editor/Reader Page-tree Handling

A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s PDF page-tree handling. A specially crafted PDF can trigger page-structure changes during rendering, causing the application to access released page objects and resulting in memory corruption and an application crash.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Foxit Foxitsoftware Microsoft
Products
Pdf Editor Pdf Reader Foxit Pdf Editor and 2 more
CVE-2026-106202

chromium-browser: Uninitialized resource in ANGLE

Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)

CVSS 3.1 · 4.7 Medium EPSS < 1% KEV · Not listed
Vendors
Google Microsoft
Products
Chrome Windows
CVE-2025-9068

Rockwell Automation FactoryTalk® Linx Privilege Escalation Vulnerabilities

A security issue exists within the Rockwell Automation Driver Package x64 Microsoft Installer File (MSI) repair functionality, installed with FTLinx. Authenticated attackers with valid Windows Users credentials can initiate a repair and hijack the resulting console window for vbpinstall.exe. This allows the launching of a command prompt running with SYSTEM-level privileges, allowing full access to all files, processes, and system resources.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
Microsoft Rockwellautomation
Products
Windows Factorytalk Linx
CVE-2025-33131

Fixes to common vulnerabilities found in IBM Db2 High Performance Unload

IBM DB2 High Performance Unload 6.1.0.3, 5.1.0.1, 6.1.0.2, 6.5, 6.5.0.0 IF1, 6.1.0.1, 6.1, and 5.1 could allow an authenticated user to cause the program to crash due to a buffer being overwritten when it is allocated on the stack.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Ibm Linux Microsoft
Products
Aix Db2 High Performance Unload Db2 High Performance Unload Load and 3 more
CVE-2022-30168

Microsoft Photos App Remote Code Execution Vulnerability

Microsoft Photos App Remote Code Execution Vulnerability

CVSS 3.1 · 7.8 High EPSS 2.9% KEV · Not listed
Vendors
Microsoft
Products
Photos
CVE-2026-106215

chromium-browser: Uninitialized resource in ANGLE

Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)

CVSS 3.1 · 4.7 Medium EPSS < 1% KEV · Not listed
Vendors
Google Microsoft
Products
Chrome Windows
CVE-2026-106214

chromium-browser: Information leak in Proxy

Information leak in Proxy in Google Chrome on on Windows prior to 155.0.8059.39 allowed an adjacent attacker to obtain sensitive information via crafted network traffic. (Chromium security severity: High)

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Google Microsoft
Products
Chrome Windows
CVE-2025-3928

Commvault Web Server unspecified vulnerability

Commvault Web Server has an unspecified vulnerability that can be exploited by a remote, authenticated attacker. According to the Commvault advisory: "Webservers can be compromised through bad actors creating and executing webshells." Fixed in version 11.36.46, 11.32.89, 11.28.141, and 11.20.217 for Windows and Linux platforms. This vulnerability was added to the CISA Known Exploited Vulnerabilities (KEV) Catalog on 2025-04-28.

CVSS 4.0 · 8.7 High EPSS 2.5% KEV · Listed
Vendors
Commvault Linux Microsoft
Products
Commvault Linux Kernel Windows