Export limit exceeded: 424542 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (10898 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-64011 1 Linux 1 Linux Kernel 2026-10-13 7.8 High
In the Linux kernel, the following vulnerability has been resolved: nfc: llcp: Fix use-after-free in llcp_sock_release() llcp_sock_release() unconditionally unlinks the socket from the local sockets list. However, if the socket is still in connecting state, it is on the connecting list. Fix this by checking the socket state and unlinking from the correct list.
CVE-2026-21120 1 Samsung Mobile 1 Samsung Mobile Devices 2026-10-12 N/A
Use after free in WSM service prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code with system privilege.
CVE-2026-20542 1 Mediatek 39 Mediatek Chipset, Mt2718, Mt2718 Firmware and 36 more 2026-10-09 6.7 Medium
In apusys, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11076799; Issue ID: MSV-8143.
CVE-2026-20537 2 Mediatek, Mediatek, Inc. 23 Mt6878, Mt6878 Firmware, Mt6881 and 20 more 2026-10-09 6.7 Medium
In aidl, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11185225; Issue ID: MSV-9024.
CVE-2026-20531 2 Mediatek, Mediatek, Inc. 13 Mt6899, Mt6899 Firmware, Mt6993 and 10 more 2026-10-09 8.4 High
In apu, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11249016; Issue ID: MSV-9169.
CVE-2026-20536 2 Mediatek, Mediatek, Inc. 27 Mt6878, Mt6878 Firmware, Mt6881 and 24 more 2026-10-09 6.7 Medium
In aidl, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11242428; Issue ID: MSV-9038.
CVE-2022-2946 3 Debian, Fedoraproject, Vim 3 Debian Linux, Fedora, Vim 2026-10-09 7.8 High
Use After Free in GitHub repository vim/vim prior to 9.0.0246.
CVE-2026-57559 1 Qualcomm 45 Cologne, Cologne Firmware, Fastconnect 6700 and 42 more 2026-10-09 7.8 High
Memory corruption while processing service requests.
CVE-2026-57555 1 Qualcomm 45 Cologne, Cologne Firmware, Fastconnect 6700 and 42 more 2026-10-09 7.8 High
Memory Corruption when executing system service routines due to improper handling of user input buffers.
CVE-2026-57554 1 Qualcomm 437 Ar8031, Ar8031 Firmware, Ar8035 and 434 more 2026-10-09 7.8 High
Memory Corruption when asynchronous threads access shared performance counter data simultaneously during FastRPC invocations.
CVE-2026-57537 1 Qualcomm 145 Congo, Congo Firmware, Fastconnect 6200 and 142 more 2026-10-09 7.8 High
Memory Corruption when accessing and modifying geographic mapping data concurrently without proper synchronization.
CVE-2026-25291 1 Qualcomm 227 Cq8845s, Cq8845s Firmware, Cq8850ns and 224 more 2026-10-09 7.8 High
Memory corruption when performing concurrent operations on shared memory page lists due to lack of proper synchronization mechanisms.
CVE-2026-25274 1 Qualcomm 91 Aqt1000, Aqt1000 Firmware, Cologne and 88 more 2026-10-09 6.7 Medium
Memory Corruption when processing concurrent DMA buffer allocation and deallocation commands without proper synchronization.
CVE-2023-1838 3 Linux, Netapp, Redhat 9 Linux Kernel, H300s, H410c and 6 more 2026-10-08 7.1 High
A use-after-free flaw was found in vhost_net_set_backend in drivers/vhost/net.c in virtio network subcomponent in the Linux kernel due to a double fget. This flaw could allow a local attacker to crash the system, and could even lead to a kernel information leak problem.
CVE-2022-2042 2 Apple, Vim 2 Macos, Vim 2026-10-08 7.8 High
Use After Free in GitHub repository vim/vim prior to 8.2.
CVE-2022-1616 4 Apple, Debian, Fedoraproject and 1 more 4 Macos, Debian Linux, Fedora and 1 more 2026-10-08 7.8 High
Use after free in append_command in GitHub repository vim/vim prior to 8.2.4895. This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote execution
CVE-2021-37159 4 Debian, Linux, Oracle and 1 more 6 Debian Linux, Linux Kernel, Communications Cloud Native Core Binding Support Function and 3 more 2026-10-08 6.4 Medium
hso_free_net_device in drivers/net/usb/hso.c in the Linux kernel through 5.13.4 calls unregister_netdev without checking for the NETREG_REGISTERED state, leading to a use-after-free and a double free.
CVE-2018-7162 1 Nodejs 1 Node.js 2026-10-08 7.5 High
All versions of Node.js 9.x and 10.x are vulnerable and the severity is HIGH. An attacker can cause a denial of service (DoS) by causing a node process which provides an http server supporting TLS server to crash. This can be accomplished by sending duplicate/unexpected messages during the handshake. This vulnerability has been addressed by updating the TLS implementation.
CVE-2022-2345 2 Fedoraproject, Vim 2 Fedora, Vim 2026-10-08 7.8 High
Use After Free in GitHub repository vim/vim prior to 9.0.0046.
CVE-2022-27867 1 Autodesk 1 Autocad 2026-10-08 7.8 High
A maliciously crafted JT file in Autodesk AutoCAD 2022, 2021, 2020, 2019 can be used to trigger use-after-free vulnerability. Exploitation of this vulnerability may lead to code execution.