Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (7546 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2025-21183 1 Microsoft 3 Windows 11 24h2, Windows 11 24h2, Windows Server 2025 2025-12-17 7.4 High
Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability
CVE-2025-21182 1 Microsoft 3 Windows 11 24h2, Windows 11 24h2, Windows Server 2025 2025-12-17 7.4 High
Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability
CVE-2025-21379 1 Microsoft 3 Windows 11 24h2, Windows 11 24h2, Windows Server 2025 2025-12-17 7.1 High
DHCP Client Service Remote Code Execution Vulnerability
CVE-2025-24044 1 Microsoft 21 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 18 more 2025-12-17 7.8 High
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
CVE-2025-26629 1 Microsoft 3 365 Apps, Office 2024, Office Long Term Servicing Channel 2025-12-17 7.8 High
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-26630 1 Microsoft 8 365 Apps, Access, Access 2016 and 5 more 2025-12-17 7.8 High
Use after free in Microsoft Office Access allows an unauthorized attacker to execute code locally.
CVE-2025-24983 1 Microsoft 8 Windows 10 1507, Windows 10 1607, Windows Server 2008 and 5 more 2025-12-17 7 High
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
CVE-2025-24072 1 Microsoft 24 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 21 more 2025-12-17 7.8 High
Use after free in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally.
CVE-2025-24064 1 Microsoft 11 Windows Server 2008, Windows Server 2008 R2, Windows Server 2008 Sp2 and 8 more 2025-12-17 8.1 High
Use after free in DNS Server allows an unauthorized attacker to execute code over a network.
CVE-2025-24046 1 Microsoft 18 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 15 more 2025-12-17 7.8 High
Use after free in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.
CVE-2025-21247 1 Microsoft 24 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 21 more 2025-12-17 4.3 Medium
Improper resolution of path equivalence in Windows MapUrlToZone allows an unauthorized attacker to bypass a security feature over a network.
CVE-2025-24082 1 Microsoft 11 365 Apps, Excel, Excel 2016 and 8 more 2025-12-17 7.8 High
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-24081 1 Microsoft 11 365 Apps, Excel, Excel 2016 and 8 more 2025-12-17 7.8 High
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-24080 1 Microsoft 7 365 Apps, Office, Office 2016 and 4 more 2025-12-17 7.8 High
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-24079 1 Microsoft 10 365 Apps, Office, Office 2019 and 7 more 2025-12-17 7.8 High
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2025-24078 1 Microsoft 10 365 Apps, Office, Office 2019 and 7 more 2025-12-17 7 High
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2025-24077 1 Microsoft 5 365 Apps, Office 2024, Office Long Term Servicing Channel and 2 more 2025-12-17 7.8 High
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2025-43511 1 Apple 3 Ios, Ipados, Iphone Os 2025-12-17 6.5 Medium
A use-after-free issue was addressed with improved memory management. This issue is fixed in watchOS 26.2, Safari 26.2, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, iOS 18.7.2 and iPadOS 18.7.2, visionOS 26.2. Processing maliciously crafted web content may lead to an unexpected process crash.
CVE-2025-43478 1 Apple 3 Macos, Macos Sequoia, Macos Sonoma 2025-12-17 5.5 Medium
A use after free issue was addressed with improved memory management. This issue is fixed in macOS Sequoia 15.7.2, macOS Tahoe 26.1, macOS Sonoma 14.8.2. An app may be able to cause unexpected system termination.
CVE-2025-43457 1 Apple 6 Ios, Ipados, Iphone Os and 3 more 2025-12-17 6.5 Medium
A use-after-free issue was addressed with improved memory management. This issue is fixed in watchOS 26.1, macOS Tahoe 26.1, iOS 26.1 and iPadOS 26.1, Safari 26.1, visionOS 26.1. Processing maliciously crafted web content may lead to an unexpected Safari crash.