Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (22961 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2025-21357 1 Microsoft 8 365 Apps, Office, Office 2019 and 5 more 2026-02-26 6.7 Medium
Microsoft Outlook Remote Code Execution Vulnerability
CVE-2025-29806 1 Microsoft 1 Edge Chromium 2026-02-26 6.5 Medium
No cwe for this issue in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
CVE-2025-21362 1 Microsoft 11 365 Apps, Excel, Excel 2016 and 8 more 2026-02-26 8.4 High
Microsoft Excel Remote Code Execution Vulnerability
CVE-2025-21363 1 Microsoft 5 365 Apps, Office 2024, Office Long Term Servicing Channel and 2 more 2026-02-26 7.8 High
Microsoft Word Remote Code Execution Vulnerability
CVE-2025-29795 1 Microsoft 2 Edge Update, Edge Update Setup 2026-02-26 7.8 High
Improper link resolution before file access ('link following') in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate privileges locally.
CVE-2025-21365 1 Microsoft 3 365 Apps, Office 2024, Office Long Term Servicing Channel 2026-02-26 7.8 High
Microsoft Office Remote Code Execution Vulnerability
CVE-2025-21366 1 Microsoft 8 365 Apps, Access, Access 2016 and 5 more 2026-02-26 7.8 High
Microsoft Access Remote Code Execution Vulnerability
CVE-2025-21395 1 Microsoft 8 365 Apps, Access, Access 2016 and 5 more 2026-02-26 7.8 High
Microsoft Access Remote Code Execution Vulnerability
CVE-2025-21157 3 Adobe, Apple, Microsoft 3 Indesign, Macos, Windows 2026-02-26 7.8 High
InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2025-21403 1 Microsoft 2 On-prem Data Gateway, Sap Hana Enabled Sso For Onpremises Data Gateway 2026-02-26 6.4 Medium
On-Premises Data Gateway Information Disclosure Vulnerability
CVE-2025-21158 3 Adobe, Apple, Microsoft 3 Indesign, Macos, Windows 2026-02-26 7.8 High
InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2025-21335 1 Microsoft 13 Windows 10 21h2, Windows 10 21h2, Windows 10 22h2 and 10 more 2026-02-26 7.8 High
Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
CVE-2025-21187 1 Microsoft 1 Power Automate For Desktop 2026-02-26 7.8 High
Microsoft Power Automate Remote Code Execution Vulnerability
CVE-2025-21186 1 Microsoft 8 365 Apps, Access, Access 2016 and 5 more 2026-02-26 7.8 High
Microsoft Access Remote Code Execution Vulnerability
CVE-2025-21224 1 Microsoft 14 Windows 10 21h2, Windows 10 21h2, Windows 10 22h2 and 11 more 2026-02-26 8.1 High
Windows Line Printer Daemon (LPD) Service Remote Code Execution Vulnerability
CVE-2025-21172 4 Apple, Linux, Microsoft and 1 more 10 Macos, Linux Kernel, .net and 7 more 2026-02-26 7.5 High
.NET and Visual Studio Remote Code Execution Vulnerability
CVE-2025-21361 1 Microsoft 4 Office, Office Macos 2021, Office Macos 2024 and 1 more 2026-02-26 7.8 High
Microsoft Outlook Remote Code Execution Vulnerability
CVE-2025-21372 1 Microsoft 5 Windows 11 24h2, Windows 11 24h2, Windows Server 2022 23h2 and 2 more 2026-02-26 7.8 High
Microsoft Brokering File System Elevation of Privilege Vulnerability
CVE-2025-21402 1 Microsoft 5 Office, Office Macos 2021, Office Macos 2024 and 2 more 2026-02-26 7.8 High
Microsoft Office OneNote Remote Code Execution Vulnerability
CVE-2025-2783 2 Google, Microsoft 2 Chrome, Windows 2026-02-26 8.3 High
Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior to 134.0.6998.177 allowed a remote attacker to perform a sandbox escape via a malicious file. (Chromium security severity: High)