Export limit exceeded: 425864 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 425864 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 425,864

Export CSV
CVE-2026-71444

CAI Content Credentials | Integer Underflow (Wrap or Wraparound) (CWE-191)

CAI Content Credentials is affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user interaction.

CVSS 3.1 · 6.2 Medium EPSS < 1% KEV · Not listed
Vendors
Adobe
Products
C2pa C2patool
CVE-2026-76189

CAI Content Credentials | Integer Underflow (Wrap or Wraparound) (CWE-191)

CAI Content Credentials is affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user interaction.

CVSS 3.1 · 6.2 Medium EPSS < 1% KEV · Not listed
Vendors
Adobe
Products
C2pa C2patool
CVE-2026-20886

Out-of-Bounds Write Allowing Denial of Service in Intel PROSet/Wireless WiFi Drivers on Windows

Out-of-bounds write for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via adjacent access when attack requirements are not present without special internal knowledge and requires passive user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (low) impacts.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Intel
Products
Intel Proset Wireless Wifi Software For Windows Killer Wi-fi 6 Ax1650i\/s Killer Wi-fi 6e Ax1675i\/s and 16 more
CVE-2026-20878

Unsupported Pointer Dereference in Intel PROSet/Wireless WiFi Driver Leads to Denial of Service

Null pointer dereference for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via adjacent access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (low) impacts.

CVSS 4.0 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
Intel
Products
Intel Proset Wireless Wifi Software For Windows Killer Wi-fi 6 Ax1650i\/s Killer Wi-fi 6e Ax1675i\/s and 16 more
CVE-2026-20787

Null Pointer Dereference Leading to Denial of Service in Intel PROSet WiFi Software

Null pointer dereference for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via adjacent access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (low) impacts.

CVSS 4.0 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
Intel
Products
Intel Proset Wireless Wifi Software For Windows Killer Wi-fi 6 Ax1650i\/s Killer Wi-fi 6e Ax1675i\/s and 16 more
CVE-2026-20780

Denial of Service via Uncontrolled Resource Consumption in Intel PROSet/Wireless WiFi Driver

Uncontrolled resource consumption for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (low) impacts.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Intel
Products
Intel Proset Wireless Wifi Software For Windows Killer Wi-fi 6 Ax1650i\/s Killer Wi-fi 6e Ax1675i\/s and 16 more
CVE-2026-20749

Out‑of‑Bounds Read in Intel PROSet/Wireless WiFi Software Allowing Privilege Escalation

Out-of-bounds read for some Intel(R) PROSet/Wireless WiFi Software within Ring 2: Device Drivers may allow an escalation of privilege. Network adversary with an unauthenticated user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via adjacent access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (low), integrity (low) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (low), integrity (low) and availability (low) impacts.

CVSS 4.0 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Intel
Products
Killer Wi-fi 6 Ax1650i\/s Killer Wi-fi 6e Ax1675i\/s Killer Wi-fi 6e Ax1675x\/w and 16 more
CVE-2026-20745

Out‑of‑Bounds Write in Intel PROSet/Wireless WiFi Driver Leading to Denial of Service

Out-of-bounds write for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via adjacent access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (low) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (low) impacts.

CVSS 4.0 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
Intel
Products
Intel Proset Wireless Wifi Software For Windows Killer Wi-fi 6 Ax1650i\/s Killer Wi-fi 6e Ax1675i\/s and 16 more
CVE-2026-20737

Intel PROSet/Wireless WiFi Software for Windows Local Code Execution via Device Driver

Exposure of sensitive information to an unauthorized actor for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow an escalation of privilege. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable local code execution. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (low), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (low) and availability (low) impacts.

CVSS 4.0 · 6.3 Medium EPSS < 1% KEV · Not listed
Vendors
Intel
Products
Intel Proset Wireless Wifi Software For Windows Killer Wi-fi 6 Ax1650i\/s Killer Wi-fi 6e Ax1675i\/s and 16 more
CVE-2026-72684

Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of Service

A flaw in Elasticsearch allows an authenticated user holding only read privileges to submit a small search request containing a crafted user-supplied input. Processing that input causes a specific internal component to allocate memory without any upper bound, and the allocation occurs outside the scope of the existing memory accounting controls that were intended to constrain it. The resulting out-of-memory condition is fatal and terminates the affected node process, causing a denial of service.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Elastic
Products
Elasticsearch
CVE-2026-72685

Inefficient Algorithmic Complexity in Elasticsearch Leading to Denial of Service

A flaw in Elasticsearch allows a low-privileged authenticated user who can index documents to submit a single small document containing a crafted user-supplied input. Processing one such document occupies a worker thread from a bounded pool for a disproportionate amount of time, degrading the availability of indexing operations on the affected node.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Elastic
Products
Elasticsearch
CVE-2026-72686

Uncontrolled Recursion in Elasticsearch Leading to Denial of Service

A flaw in Elasticsearch allows a low-privileged authenticated user to submit a single request containing a crafted user-supplied input. A specific internal component validates the input using a recursive routine and applies no bound to the length of the value being validated, so the validation causes the thread to exhaust its stack. The resulting fatal error is not handled by the surrounding execution paths and terminates the affected node process, producing a denial of service.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Elastic
Products
Elasticsearch
CVE-2026-72687

Memory Allocation with Excessive Size Value in Elasticsearch Leading to Denial of Service

A flaw in Elasticsearch allows a low-privileged authenticated user to submit a single small request containing a forged opaque identifier. Elasticsearch decodes and deserializes the identifier before confirming that it was legitimately issued by the cluster, and a size value carried inside the identifier drives an allocation that is neither capped nor accounted for by the available memory-usage controls. The resulting out-of-memory condition is fatal and terminates the affected node process, resulting in a denial of service.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Elastic
Products
Elasticsearch
CVE-2026-79770

Nokogiri before 1.19.3 ReDoS via CSS selector tokenizer

Nokogiri versions before 1.19.3 contain regular expression denial of service vulnerabilities in the CSS selector tokenizer affecting string-literal and identifier tokenization. Attackers can inject adversarial CSS selectors into methods like Node#css, Node#at_css, and Searchable#search to cause exponential regex backtracking and denial of service.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Nokogiri
Products
Nokogiri
CVE-2026-79771

Nokogiri before 1.19.3 Memory Leak via XSLT Transform

Nokogiri versions before 1.19.3 contain a memory leak in the XSLT Stylesheet transform method when processing Ruby strings containing null bytes. Attackers can exploit this by passing attacker-controlled input with null bytes to transform parameters, causing heap allocations to leak and enabling denial of service against long-running processes.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Nokogiri Sparklemotion
Products
Nokogiri Nokogiri
CVE-2026-79772

Nokogiri before 1.19.1 Unchecked Return Value canonicalize

Nokogiri versions before 1.19.1 fail to check the return value from xmlC14NExecute in the canonicalize method, returning an empty string on failure instead of raising an exception. Attackers can exploit this to bypass signature validation in downstream SAML libraries by providing invalid canonicalized XML that is incorrectly accepted as valid.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Nokogiri Sparklemotion
Products
Nokogiri Nokogiri
CVE-2026-19694

Heap-based Buffer Overflow in Wireshark

TTX Logger file parser crash in 4.6.0 to 4.6.7 allows denial of service

CVSS 3.1 · 4.7 Medium EPSS < 1% KEV · Not listed
Vendors
Wireshark
Products
Wireshark
CVE-2026-28191

WordPress The Grid plugin <= 2.8.0 - Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in ThemeOne The Grid allows Privilege Escalation. This issue affects The Grid: from n/a through 2.8.0.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Theme-one Wordpress
Products
The Grid Wordpress
CVE-2026-19695

Stack-based Buffer Overflow in Wireshark

Gammu DCT3 trace file parser crash in 4.6.0 to 4.6.7 allows denial of service

CVSS 3.1 · 4.7 Medium EPSS < 1% KEV · Not listed
Vendors
Wireshark
Products
Wireshark
CVE-2026-19696

Out-of-bounds Write in Wireshark

Ixia IxVeriWave and Vector Informatik BLF file parser crashes in 4.6.0 to 4.6.7 allows denial of service on Windows

CVSS 3.1 · 6.6 Medium EPSS < 1% KEV · Not listed
Vendors
Microsoft Wireshark
Products
Windows Wireshark