Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (6894 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2025-21394 1 Microsoft 11 365 Apps, Excel, Excel 2016 and 8 more 2025-12-17 7.8 High
Microsoft Excel Remote Code Execution Vulnerability
CVE-2025-21392 1 Microsoft 9 365 Apps, Office, Office 2016 and 6 more 2025-12-17 7.8 High
Microsoft Office Remote Code Execution Vulnerability
CVE-2025-21387 1 Microsoft 11 365 Apps, Excel, Excel 2016 and 8 more 2025-12-17 7.8 High
Microsoft Excel Remote Code Execution Vulnerability
CVE-2025-21386 1 Microsoft 11 365 Apps, Excel, Excel 2016 and 8 more 2025-12-17 7.8 High
Microsoft Excel Remote Code Execution Vulnerability
CVE-2025-21406 1 Microsoft 24 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 21 more 2025-12-17 8.8 High
Windows Telephony Service Remote Code Execution Vulnerability
CVE-2025-21379 1 Microsoft 3 Windows 11 24h2, Windows 11 24h2, Windows Server 2025 2025-12-17 7.1 High
DHCP Client Service Remote Code Execution Vulnerability
CVE-2025-24044 1 Microsoft 21 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 18 more 2025-12-17 7.8 High
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
CVE-2025-26629 1 Microsoft 3 365 Apps, Office 2024, Office Long Term Servicing Channel 2025-12-17 7.8 High
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-26630 1 Microsoft 8 365 Apps, Access, Access 2016 and 5 more 2025-12-17 7.8 High
Use after free in Microsoft Office Access allows an unauthorized attacker to execute code locally.
CVE-2025-24983 1 Microsoft 8 Windows 10 1507, Windows 10 1607, Windows Server 2008 and 5 more 2025-12-17 7 High
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
CVE-2025-24072 1 Microsoft 24 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 21 more 2025-12-17 7.8 High
Use after free in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally.
CVE-2025-24064 1 Microsoft 11 Windows Server 2008, Windows Server 2008 R2, Windows Server 2008 Sp2 and 8 more 2025-12-17 8.1 High
Use after free in DNS Server allows an unauthorized attacker to execute code over a network.
CVE-2025-24046 1 Microsoft 18 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 15 more 2025-12-17 7.8 High
Use after free in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.
CVE-2025-24082 1 Microsoft 11 365 Apps, Excel, Excel 2016 and 8 more 2025-12-17 7.8 High
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-24081 1 Microsoft 11 365 Apps, Excel, Excel 2016 and 8 more 2025-12-17 7.8 High
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-24080 1 Microsoft 7 365 Apps, Office, Office 2016 and 4 more 2025-12-17 7.8 High
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-24079 1 Microsoft 10 365 Apps, Office, Office 2019 and 7 more 2025-12-17 7.8 High
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2025-24078 1 Microsoft 10 365 Apps, Office, Office 2019 and 7 more 2025-12-17 7 High
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2025-24077 1 Microsoft 5 365 Apps, Office 2024, Office Long Term Servicing Channel and 2 more 2025-12-17 7.8 High
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2025-43511 1 Apple 3 Ios, Ipados, Iphone Os 2025-12-17 6.5 Medium
A use-after-free issue was addressed with improved memory management. This issue is fixed in watchOS 26.2, Safari 26.2, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, iOS 18.7.2 and iPadOS 18.7.2, visionOS 26.2. Processing maliciously crafted web content may lead to an unexpected process crash.