59.223 CVE tracked
803 Exploited now
188 Used by ransomware
Last sync
CVE Tracker
59.223 CVE
Ten vendors followed by CPE identifier, not by keyword: a CVE appears here once NVD says which products it affects — usually a few days after it is published.
| Identifier | Severity, sort descending | Product and flaw | EPSS, sorted ascending | In KEV since, sort descending |
|---|---|---|---|---|
| CVE-2024-26592 | CRIT 9.8 | linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix UAF issue in ksmbd_tcp_new_connection() The race is between the handling of a new TCP connection and its disconnection. It leads to UAF on `struct tcp_transport` in ksmbd_tcp_new_ | 1.0% | — |
| CVE-2023-40373 | MED 5.3 | ibm db2 IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) is vulnerable to denial of service with a specially crafted query containing common table expressions. IBM X-Force ID: 263574. | 1.0% | — |
| CVE-2023-40372 | MED 5.3 | ibm db2 IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 is vulnerable to denial of service with a specially crafted SQL statement using External Tables. IBM X-Force ID: 263499. | 1.0% | — |
| CVE-2023-28283 | HIGH 8.1 | microsoft windows_10_1507 Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability | 1.0% | — |
| CVE-2022-29121 | MED 6.5 | microsoft windows_10 Windows WLAN AutoConfig Service Denial of Service Vulnerability | 1.0% | — |
| CVE-2021-22996 | HIGH 7.5 | f5 big-iq_centralized_management On all 7.x versions (fixed in 8.0.0), when set up for auto failover, a BIG-IQ Data Collection Device (DCD) cluster member that receives an undisclosed message may cause the corosync process to abort. This behavior may lead to a denial-of-service (DoS) and impa | 1.0% | — |
| CVE-2019-0036 | CRIT 9.8 | juniper junos When configuring a stateless firewall filter in Junos OS, terms named using the format "internal-n" (e.g. "internal-1", "internal-2", etc.) are silently ignored. No warning is issued during configuration, and the config is committed without error, but the filt | 1.0% | — |
| CVE-2018-0039 | MED 6.5 | juniper contrail_service_orchestration Juniper Networks Contrail Service Orchestration releases prior to 4.0.0 have Grafana service enabled by default with hardcoded credentials. These credentials allow network based attackers unauthorized access to information stored in Grafana or exploit other we | 1.0% | — |
| CVE-2017-2334 | HIGH 7.5 | juniper northstar_controller An information leak vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow a network-based malicious attacker to perform a man-in-the-middle attack, thereby stealing authentic credentials from encrypt | 1.0% | — |
| CVE-2015-0661 | MED 4.0 | cisco ios_xr The SNMPv2 implementation in Cisco IOS XR allows remote authenticated users to cause a denial of service (snmpd daemon reload) via a malformed SNMP packet, aka Bug ID CSCur25858. | 1.0% | — |
| CVE-2012-3096 | MED 4.0 | cisco unity_connection Cisco Unity Connection (UC) 7.1, 8.0, and 8.5 allows remote authenticated users to cause a denial of service (resource consumption and administration outage) via extended use of the product, aka Bug ID CSCtd79132. | 1.0% | — |
| CVE-2026-8476 | CRIT 9.9 | langflow langflow IBM Langflow OSS 1.0.0 through 1.10.0 contain a critical remote code execution vulnerability in the disk-based caching mechanism. The AsyncDiskCache class uses Python's unsafe pickle.loads() function to deserialize cached objects from disk without validation, | 1.0% | — |
| CVE-2026-78509 | CRIT 9.8 | microsoft 365_apps Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. | 1.0% | — |
| CVE-2026-78445 | CRIT 9.8 | microsoft windows_server_2012 Use after free in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to execute code over a network. | 1.0% | — |
| CVE-2026-77493 | CRIT 9.8 | microsoft windows_10_1607 Double free in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network. | 1.0% | — |
| CVE-2026-73010 | CRIT 9.8 | microsoft windows_10_1809 Use after free in Windows Failover Cluster allows an unauthorized attacker to execute code over a network. | 1.0% | — |
| CVE-2026-73009 | CRIT 9.8 | microsoft windows_10_1607 Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network. | 1.0% | — |
| CVE-2026-72983 | CRIT 9.8 | microsoft windows_10_1607 Use after free in Windows Internet Connection Sharing (ICS) allows an unauthorized attacker to execute code over a network. | 1.0% | — |
| CVE-2026-72982 | CRIT 9.8 | microsoft windows_10_1607 Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network. | 1.0% | — |
| CVE-2026-72979 | CRIT 9.8 | microsoft windows_10_1607 Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network. | 1.0% | — |
| CVE-2026-70296 | CRIT 9.8 | microsoft windows_10_1607 Out-of-bounds write in Windows Imaging Component allows an unauthorized attacker to execute code over a network. | 1.0% | — |
| CVE-2026-69910 | CRIT 9.8 | microsoft windows_10_1607 Stack-based buffer overflow in Windows Hyper-V allows an unauthorized attacker to execute code over a network. | 1.0% | — |
| CVE-2026-69829 | CRIT 9.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network. | 1.0% | — |
| CVE-2026-69824 | CRIT 9.8 | microsoft windows_10_1607 Integer underflow (wrap or wraparound) in Microsoft Standard XPS allows an unauthorized attacker to execute code over a network. | 1.0% | — |
| CVE-2026-69819 | CRIT 9.8 | microsoft windows_10_1607 Out-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code over a network. | 1.0% | — |