Riskcovery

Vulnerabilities

Every vulnerability the CVE Program has published, newest first. Search by CVE ID, product, or words from the description.

402,123 vulnerabilities match.

CVESeveritySummary
CVE-2026-1084536.5 MediumMicrosoft Office PowerPoint Information Disclosure Vulnerability
CVE-2026-1084528.8 HighMicrosoft Office SharePoint Remote Code Execution Vulnerability
CVE-2026-1084518.8 HighMicrosoft Office Word Remote Code Execution Vulnerability
CVE-2026-1084508.8 HighMicrosoft Office Word Remote Code Execution Vulnerability
CVE-2026-1084498.8 HighMicrosoft Office Word Remote Code Execution Vulnerability
CVE-2026-1084487.5 HighMicrosoft Office Outlook Remote Code Execution Vulnerability
CVE-2026-1084478.8 HighMicrosoft Office Word Remote Code Execution Vulnerability
CVE-2026-1084468.8 HighMicrosoft Office Excel Remote Code Execution Vulnerability
CVE-2026-1084458.8 HighMicrosoft Office Word Remote Code Execution Vulnerability
CVE-2026-1084448.8 HighMicrosoft Office Remote Code Execution Vulnerability
CVE-2026-1084438.8 HighMicrosoft Office Word Remote Code Execution Vulnerability
CVE-2026-1084428.8 HighMicrosoft Office Word Remote Code Execution Vulnerability
CVE-2026-1084418.8 HighMicrosoft Office Word Remote Code Execution Vulnerability
CVE-2026-1084408.8 HighMicrosoft Office Word Remote Code Execution Vulnerability
CVE-2026-1084398.8 HighMicrosoft Office Word Remote Code Execution Vulnerability
CVE-2026-1084386.5 MediumMicrosoft Office Word Information Disclosure Vulnerability
CVE-2026-1084378.8 HighMicrosoft Office Word Remote Code Execution Vulnerability
CVE-2026-1084366.5 MediumMicrosoft Office Word Information Disclosure Vulnerability
CVE-2026-1084356.5 MediumMicrosoft Office Word Information Disclosure Vulnerability
CVE-2026-1084346.5 MediumMicrosoft Office Word Information Disclosure Vulnerability
CVE-2026-1084337.8 HighMicrosoft Office Word Security Feature Bypass Vulnerability
CVE-2026-1084328.8 HighMicrosoft Office Word Remote Code Execution Vulnerability
CVE-2026-1084318.8 HighMicrosoft Office Word Remote Code Execution Vulnerability
CVE-2026-1084308.8 HighMicrosoft Office Word Remote Code Execution Vulnerability
CVE-2026-1084298.8 HighMicrosoft Office Word Remote Code Execution Vulnerability
CVE-2026-1084288.8 HighMicrosoft Office Word Remote Code Execution Vulnerability
CVE-2026-1084278.8 HighMicrosoft Office Word Remote Code Execution Vulnerability
CVE-2026-1084268.8 HighMicrosoft Office Word Remote Code Execution Vulnerability
CVE-2026-1113577.0 HighIvanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, leading to privilege escalation to root, as exploited in the wild in October 2026.
CVE-2026-1050408.8 HighEnergizeLab Eilik User-ID Mass Assignment Account Takeover
CVE-2026-1050399.6 CriticalEnergizeLab Station Middleware Admin APIs Missing Role Checks
CVE-2026-1050389.8 CriticalEnergizeLab Eilik Unauthenticated AI Model Administration and Runtime Model Switching
CVE-2026-1050379.9 CriticalEnergizeLab Station Middleware Authenticated Path Traversal Arbitrary File Read
CVE-2026-1050367.5 HighEnergizeLab Firmware Updates Downloaded over HTTP Without Integrity Checks
CVE-2026-1050357.8 HighEnergizeLab FirmwareUpdater Universal Hard-Coded AES Key
CVE-2026-1050348.2 HighEnergizeLab Eilik Unauthenticated Device-Token Issuance for Arbitrary Serial Numbers
CVE-2026-1050338.8 HighEnergizeLab AI Station Default Root Credentials with SSH Enabled
CVE-2026-1050329.1 CriticalEnergizeLab Eilik AI Skill Upload Unauthenticated Path Traversal Arbitrary File Write
CVE-2026-1027649.3 CriticalImproper Origin Validation in Internal Messaging Components of BeyondTrust Remote Support
CVE-2026-1041985.3 MediumZoneMinder failed token handling bypasses web authentication
CVE-2026-1081266.0 Mediumtemporal-proxy payload decryption is not bound to the request namespace
CVE-2026-451658.6 HighIdira Secrets Manager (Self-Hosted): Improper Authorization in REST API
CVE-2026-1111726.0 Medium@casl/ability 6.7.5 before 7.0.2 Prototype Pollution via rulesToFields setByPath
CVE-2026-1111716.3 MediumWeb3.py 7.15.0 through 7.16.0 and 8.0.0b2 through 8.0.0 CCIP-Read SSRF Bypass
CVE-2026-1111707.1 Highkedro-datasets 9.3.0 through 9.6.0 Path Traversal via MatplotlibDataset Plot Name
CVE-2026-1111692.3 LowLa Suite Docs through 6.0.1 Authorization Bypass via Comment Thread Creation
CVE-2026-1111685.1 MediumLibreDesk before 2.9.0-rc.8 Stored XSS via SVG Upload Content-Type Parameter
CVE-2026-1111676.9 MediumGNU LibreDWG through 0.14.8612 Out-of-Bounds Read in acds_private AcDs Decoder
CVE-2026-1111666.8 Mediumlibmikmod through 3.3.15 Heap Out-of-Bounds Read via IMF_Load
CVE-2026-1111656.8 Mediumlibmikmod through 3.3.15 Out-of-Bounds Read in MTM_Load via Channel Count

Every record here comes from the CVE Program's CVE List. © 1999-2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.