Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (604 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2021-26877 1 Microsoft 10 Windows Server 1909, Windows Server 2004, Windows Server 2008 and 7 more 2024-11-21 9.8 Critical
Windows DNS Server Remote Code Execution Vulnerability
CVE-2021-26867 1 Microsoft 7 Windows 10, Windows 10 1809, Windows 10 1909 and 4 more 2024-11-21 9.9 Critical
Windows Hyper-V Remote Code Execution Vulnerability
CVE-2021-26622 2 Genians, Microsoft 2 Genian Nac, Windows 2024-11-21 9.6 Critical
An remote code execution vulnerability due to SSTI vulnerability and insufficient file name parameter validation was discovered in Genian NAC. Remote attackers are able to execute arbitrary malicious code with SYSTEM privileges on all connected nodes in NAC through this vulnerability.
CVE-2021-26606 2 Dreamsecurity, Microsoft 2 Magicline4nx.exe, Windows 2024-11-21 9.8 Critical
A vulnerability in PKI Security Solution of Dream Security could allow arbitrary command execution. This vulnerability is due to insufficient validation of the authorization certificate. An attacker could exploit this vulnerability by sending a crafted HTTP request an affected program. A successful exploit could allow the attacker to remotely execute arbitrary code on a target system.
CVE-2021-26472 2 Microsoft, Vembu 3 Windows, Bdr Suite, Offsite Dr 2024-11-21 10 Critical
In VembuBDR before 4.2.0.1 and VembuOffsiteDR before 4.2.0.1 installed on Windows, the http API located at /consumerweb/secure/download.php. Using this command argument an unauthenticated attacker can execute arbitrary OS commands with SYSTEM privileges.
CVE-2021-26443 1 Microsoft 11 Windows 10, Windows 10 1809, Windows 10 1909 and 8 more 2024-11-21 9 Critical
Microsoft Virtual Machine Bus (VMBus) Remote Code Execution Vulnerability
CVE-2021-26432 1 Microsoft 15 Windows 10, Windows 10 1507, Windows 10 1607 and 12 more 2024-11-21 9.8 Critical
Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability
CVE-2021-26427 1 Microsoft 1 Exchange Server 2024-11-21 9 Critical
Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2021-26424 1 Microsoft 19 Windows 10, Windows 10 1507, Windows 10 1607 and 16 more 2024-11-21 9.9 Critical
Windows TCP/IP Remote Code Execution Vulnerability
CVE-2021-26412 1 Microsoft 1 Exchange Server 2024-11-21 9.1 Critical
Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2021-26334 3 Amd, Linux, Microsoft 3 Amd Uprof, Linux Kernel, Windows 2024-11-21 9.9 Critical
The AMDPowerProfiler.sys driver of AMD μProf tool may allow lower privileged users to access MSRs in kernel which may lead to privilege escalation and ring-0 code execution by the lower privileged user.
CVE-2021-24094 1 Microsoft 20 Windows 10, Windows 10 1507, Windows 10 1607 and 17 more 2024-11-21 9.8 Critical
Windows TCP/IP Remote Code Execution Vulnerability
CVE-2021-24078 1 Microsoft 10 Windows Server 1909, Windows Server 2004, Windows Server 2008 and 7 more 2024-11-21 9.8 Critical
Windows DNS Server Remote Code Execution Vulnerability
CVE-2021-24077 1 Microsoft 20 Windows 10, Windows 10 1507, Windows 10 1607 and 17 more 2024-11-21 9.8 Critical
Windows Fax Service Remote Code Execution Vulnerability
CVE-2021-24074 1 Microsoft 20 Windows 10, Windows 10 1507, Windows 10 1607 and 17 more 2024-11-21 9.8 Critical
Windows TCP/IP Remote Code Execution Vulnerability
CVE-2021-21155 3 Fedoraproject, Google, Microsoft 3 Fedora, Chrome, Windows 2024-11-21 9.6 Critical
Heap buffer overflow in Tab Strip in Google Chrome on Windows prior to 88.0.4324.182 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
CVE-2021-21150 3 Fedoraproject, Google, Microsoft 3 Fedora, Chrome, Windows 2024-11-21 9.6 Critical
Use after free in Downloads in Google Chrome on Windows prior to 88.0.4324.182 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
CVE-2021-21132 2 Google, Microsoft 2 Chrome, Edge Chromium 2024-11-21 9.6 Critical
Inappropriate implementation in DevTools in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially perform a sandbox escape via a crafted Chrome Extension.
CVE-2021-21124 2 Google, Microsoft 2 Chrome, Edge Chromium 2024-11-21 9.6 Critical
Potential user after free in Speech Recognizer in Google Chrome on Android prior to 88.0.4324.96 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.
CVE-2021-21121 2 Google, Microsoft 2 Chrome, Edge Chromium 2024-11-21 9.6 Critical
Use after free in Omnibox in Google Chrome on Linux prior to 88.0.4324.96 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.