Export limit exceeded: 357235 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Expected end of text, found ':' (at char 6), (line:1, col:7)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (357235 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2024-49069 1 Microsoft 4 365 Apps, Excel, Office and 1 more 2026-06-09 7.8 High
Microsoft Excel Remote Code Execution Vulnerability
CVE-2024-49068 1 Microsoft 3 Sharepoint Server, Sharepoint Server 2016, Sharepoint Server 2019 2026-06-09 8.2 High
Microsoft SharePoint Elevation of Privilege Vulnerability
CVE-2024-49064 1 Microsoft 3 Sharepoint Server, Sharepoint Server 2016, Sharepoint Server 2019 2026-06-09 6.5 Medium
Microsoft SharePoint Information Disclosure Vulnerability
CVE-2024-49059 1 Microsoft 3 365 Apps, Office, Office Long Term Servicing Channel 2026-06-09 7 High
Microsoft Office Elevation of Privilege Vulnerability
CVE-2024-49057 1 Microsoft 1 Defender For Endpoint 2026-06-09 8.1 High
Microsoft Defender for Endpoint on Android Spoofing Vulnerability
CVE-2024-43594 1 Microsoft 4 System Center, System Center 2019, System Center 2022 and 1 more 2026-06-09 7.3 High
Microsoft System Center Elevation of Privilege Vulnerability
CVE-2026-24858 2 Fortinet, Siemens 8 Fortianalyzer, Fortimanager, Fortinac-f and 5 more 2026-06-09 9.4 Critical
An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.5, FortiAnalyzer 7.4.0 through 7.4.9, FortiAnalyzer 7.2.0 through 7.2.11, FortiAnalyzer 7.0.0 through 7.0.15, FortiManager 7.6.0 through 7.6.5, FortiManager 7.4.0 through 7.4.9, FortiManager 7.2.0 through 7.2.11, FortiManager 7.0.0 through 7.0.15, FortiNAC-F 7.6.3 through 7.6.5, FortiOS 7.6.0 through 7.6.5, FortiOS 7.4.0 through 7.4.10, FortiOS 7.2.0 through 7.2.12, FortiOS 7.0.0 through 7.0.18, FortiProxy 7.6.0 through 7.6.4, FortiProxy 7.4.0 through 7.4.12, FortiProxy 7.2.0 through 7.2.15, FortiProxy 7.0.0 through 7.0.22, FortiWeb 8.0.0 through 8.0.3, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4.0 through 7.4.11 may allow an attacker with a FortiCloud account and a registered device to log into other devices registered to other accounts, if FortiCloud SSO authentication is enabled on those devices.
CVE-2026-10727 1 Ivanti 1 Endpoint Manager Mobile 2026-06-09 7.2 High
An OS command injection vulnerability in Ivanti EPMM before 12.9.0.1, 12.8.0.3 and 12.7.0.2 versions allows a remote authenticated attacker to execute arbitrary commands as root
CVE-2024-43582 1 Microsoft 18 Windows 10 1809, Windows 10 21h2, Windows 10 21h2 and 15 more 2026-06-09 8.1 High
Remote Desktop Protocol Server Remote Code Execution Vulnerability
CVE-2024-43511 1 Microsoft 20 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 17 more 2026-06-09 7 High
Windows Kernel Elevation of Privilege Vulnerability
CVE-2024-43527 1 Microsoft 2 Windows 11 24h2, Windows 11 24h2 2026-06-09 7.8 High
Windows Kernel Elevation of Privilege Vulnerability
CVE-2024-43528 1 Microsoft 17 Windows 10 1809, Windows 10 21h2, Windows 10 21h2 and 14 more 2026-06-09 7.8 High
Windows Secure Kernel Mode Elevation of Privilege Vulnerability
CVE-2024-43516 1 Microsoft 20 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 17 more 2026-06-09 7.8 High
Windows Secure Kernel Mode Elevation of Privilege Vulnerability
CVE-2024-43614 1 Microsoft 1 Defender For Endpoint 2026-06-09 5.5 Medium
Relative path traversal in Microsoft Defender for Endpoint allows an authorized attacker to perform spoofing locally.
CVE-2024-38179 1 Microsoft 3 Azure Stack Hci, Azure Stack Hci Os 22h2, Azure Stack Hci Os 23h2 2026-06-09 8.8 High
Azure Stack Hyperconverged Infrastructure (HCI) Elevation of Privilege Vulnerability
CVE-2024-43488 1 Microsoft 1 Visual Studio Code 2026-06-09 8.8 High
Missing authentication for critical function in Visual Studio Code extension for Arduino allows an unauthenticated attacker to perform remote code execution through network attack vector.
CVE-2024-43611 1 Microsoft 10 Windows Server 2008, Windows Server 2008 R2, Windows Server 2008 Sp2 and 7 more 2026-06-09 8.8 High
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVE-2024-38190 1 Microsoft 1 Power Platform 2026-06-09 8.6 High
Missing authorization in Power Platform allows an unauthenticated attacker to view sensitive information through a network attack vector.
CVE-2024-38204 1 Microsoft 1 Azure Functions 2026-06-09 7.5 High
Improper access control in Imagine Cup allows an authorized attacker to elevate privileges over a network.
CVE-2024-43610 1 Microsoft 1 Copilot Studio 2026-06-09 7.4 High
Exposure of Sensitive Information to an Unauthorized Actor in Copilot Studio allows a unauthenticated attacker to view sensitive information through network attack vector