60.267 CVE tracked
809 Exploited now
188 Used by ransomware
Last sync
CVE Tracker
60.267 CVE
Ten vendors followed by CPE identifier, not by keyword: a CVE appears here once NVD says which products it affects — usually a few days after it is published.
| Identifier | Severity, sort descending | Product and flaw | EPSS, sort descending | In KEV since, sorted descending |
|---|---|---|---|---|
| CVE-2026-106121 | MED 4.9 | vmware rabbitmq_java_client The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.37.0, com.rabbitmq.tools.json.JSONReader.read() fails to terminate when input ends inside a quoted string or a line comment becau | 0.5% | — |
| CVE-2026-105896 | MED 5.5 | adobe photoshop Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of th | 0.1% | — |
| CVE-2026-105733 | HIGH 8.8 | microsoft windows_10_21h2 Improper access control in Windows Hyper-V allows an authorized attacker to execute code locally. | 0.4% | — |
| CVE-2026-105723 | HIGH 7.5 | microsoft windows_10_1607 Untrusted pointer dereference in Windows Distributed File System (DFS) allows an unauthorized attacker to elevate privileges over a network. | 1.3% | — |
| CVE-2026-105722 | HIGH 7.0 | microsoft windows_10_1809 Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. | 0.3% | — |
| CVE-2026-105720 | MED 4.3 | microsoft sharepoint_server Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. | 0.5% | — |
| CVE-2026-105719 | MED 6.5 | microsoft sharepoint_server Improper input validation in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network. | 1.1% | — |
| CVE-2026-105718 | HIGH 8.8 | microsoft 365_apps Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | 1.0% | — |
| CVE-2026-105717 | HIGH 8.8 | microsoft 365_apps Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. | 0.9% | — |
| CVE-2026-105716 | HIGH 8.8 | microsoft 365_apps Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. | 0.8% | — |
| CVE-2026-105715 | HIGH 7.5 | microsoft 365_apps Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | 0.6% | — |
| CVE-2026-105714 | HIGH 7.5 | microsoft 365_apps Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. | 0.6% | — |
| CVE-2026-105713 | MED 5.7 | microsoft sharepoint_server Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over an adjacent network. | 0.4% | — |
| CVE-2026-10571 | MED 5.7 | ibm websphere_application_server IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is affected by a denial of service caused by insecure deserialization. A low-privileged, administrative user could exploit this vulnerability to consume system resources when the restConnecto | 0.6% | — |
| CVE-2026-105599 | HIGH 7.5 | microsoft 365_apps Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. | 0.6% | — |
| CVE-2026-105598 | HIGH 8.8 | microsoft 365_apps Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. | 0.8% | — |
| CVE-2026-105597 | HIGH 8.8 | microsoft 365_apps Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. | 0.8% | — |
| CVE-2026-105596 | HIGH 8.8 | microsoft 365_apps Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. | 0.8% | — |
| CVE-2026-105595 | HIGH 8.8 | microsoft 365_apps Out-of-bounds read in Microsoft Office Access allows an unauthorized attacker to execute code over a network. | 0.8% | — |
| CVE-2026-105593 | HIGH 8.8 | microsoft 365_apps Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. | 0.8% | — |
| CVE-2026-105592 | HIGH 7.5 | microsoft 365_apps Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. | 0.6% | — |
| CVE-2026-105591 | HIGH 8.8 | microsoft 365_apps Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. | 0.8% | — |
| CVE-2026-105244 | MED 5.3 | apache log4net Improper Encoding or Escaping of Output vulnerability in the RemoteSyslogAppender of Apache log4net. Every character outside visible ASCII and space was removed from the record instead of being escaped, so non-ASCII text and control characters such as tabs di | 0.8% | — |
| CVE-2026-105243 | MED 5.3 | apache log4net Insufficient Logging vulnerability in the EventLogAppender of Apache log4net. Long messages were truncated to a fixed size that exceeds what the Windows Event Log accepts once the log and source names are counted, and the event log then stored nothing and rep | 0.8% | — |
| CVE-2026-105242 | MED 5.3 | apache log4net Improper Handling of Exceptional Conditions vulnerability in the aspnet-request pattern converter of Apache log4net. Reading request parameters triggers ASP.NET request validation, so a request carrying content such as markup made the layout throw and the app | 0.8% | — |