Export limit exceeded: 74789 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (74789 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2025-50168 1 Microsoft 15 Server, Windows, Windows 11 and 12 more 2026-02-26 7.8 High
Access of resource using incompatible type ('type confusion') in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally.
CVE-2025-48549 1 Google 1 Android 2026-02-26 7.8 High
In multiple locations, there is a possible way to record audio via a background app due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2025-50169 1 Microsoft 6 Server, Windows, Windows 11 24h2 and 3 more 2026-02-26 7.5 High
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB allows an unauthorized attacker to execute code over a network.
CVE-2025-48552 1 Google 1 Android 2026-02-26 7.8 High
In saveGlobalProxyLocked of DevicePolicyManagerService.java, there is a possible way to desync from persistence due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2025-50173 2 Microsoft, Multimedia 28 Windows, Windows 10 1507, Windows 10 1607 and 25 more 2026-02-26 7.8 High
Weak authentication in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2025-48553 1 Google 1 Android 2026-02-26 7.8 High
In handlePackagesChanged of DevicePolicyManagerService.java, there is a possible DoS of a device admin due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2025-50176 1 Microsoft 15 Directx, Server, Windows and 12 more 2026-02-26 7.8 High
Access of resource using incompatible type ('type confusion') in Graphics Kernel allows an authorized attacker to execute code locally.
CVE-2025-48556 1 Google 1 Android 2026-02-26 7.3 High
In multiple methods of NotificationChannel.java, there is a possible desynchronization from persistence due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.
CVE-2025-48558 1 Google 1 Android 2026-02-26 7.8 High
In multiple functions of BatteryService.java, there is a possible way to hijack implicit intent intended for system app due to Implicit intent hijacking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2025-50177 1 Microsoft 29 Windows, Windows 10, Windows 10 1507 and 26 more 2026-02-26 8.1 High
Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.
CVE-2025-48563 1 Google 1 Android 2026-02-26 7.8 High
In onNullBinding of RemoteFillService.java, there is a possible background activity launch due to an insecure default value. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2025-53131 1 Microsoft 22 Server, Windows, Windows 10 and 19 more 2026-02-26 8.8 High
Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network.
CVE-2025-48581 1 Google 1 Android 2026-02-26 8.4 High
In VerifyNoOverlapInSessions of apexd.cpp, there is a possible way to block security updates due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2025-53132 1 Microsoft 27 Windows, Windows 10 1507, Windows 10 1607 and 24 more 2026-02-26 7.8 High
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
CVE-2025-53133 1 Microsoft 7 Server, Windows, Windows 11 and 4 more 2026-02-26 7.8 High
Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally.
CVE-2025-22414 1 Google 1 Android 2026-02-26 7.8 High
In FrpBypassAlertActivity of FrpBypassAlertActivity.java, there is a possible way to bypass FRP due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2025-53135 1 Microsoft 27 Directx, Windows, Windows 10 and 24 more 2026-02-26 7 High
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DirectX allows an authorized attacker to elevate privileges locally.
CVE-2025-53140 1 Microsoft 29 Windows, Windows 10, Windows 10 1507 and 26 more 2026-02-26 7 High
Use after free in Kernel Transaction Manager allows an authorized attacker to elevate privileges locally.
CVE-2025-26431 1 Google 1 Android 2026-02-26 7.8 High
In setupAccessibilityServices of AccessibilityFragment.java, there is a possible way to hide an enabled accessibility service due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2025-53142 1 Microsoft 15 Server, Windows, Windows 11 and 12 more 2026-02-26 7 High
Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.