Export limit exceeded: 54329 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (54329 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-70125 | 1 Microsoft | 3 365 Apps, Office 2021, Office 2024 | 2026-10-31 | 7.8 High |
| Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code locally. | ||||
| CVE-2026-119263 | 1 Google | 1 Chrome | 2026-10-31 | 9.6 Critical |
| Memory corruption in GarbageCollection in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) | ||||
| CVE-2026-119264 | 1 Google | 1 Chrome | 2026-10-31 | 8.8 High |
| Memory corruption in Dawn in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) | ||||
| CVE-2026-119265 | 1 Google | 1 Chrome | 2026-10-31 | 8.8 High |
| Memory corruption in Quota in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) | ||||
| CVE-2026-119267 | 1 Google | 1 Chrome | 2026-10-31 | 8.8 High |
| Memory corruption in DOM in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) | ||||
| CVE-2026-119268 | 1 Google | 1 Chrome | 2026-10-31 | 8.8 High |
| Integer overflow in Editing in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) | ||||
| CVE-2026-88158 | 1 Microsoft | 28 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 25 more | 2026-10-31 | 5.5 Medium |
| Out-of-bounds read in Microsoft Digest Authentication allows an authorized attacker to disclose information locally. | ||||
| CVE-2026-93577 | 1 Gitlab | 1 Gitlab | 2026-10-31 | 9.9 Critical |
| GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user to execute arbitrary code on the GitLab server due to an integer overflow issue when compiling a specially crafted regular expression in a CI/CD configuration. | ||||
| CVE-2026-86575 | 1 Hitachi | 5 Jp1/automatic Job Management System 3 - Agent, Jp1/automatic Job Management System 3 - Agent Minimal Edition, Jp1/automatic Job Management System 3 - Manager and 2 more | 2026-10-30 | 9.4 Critical |
| Stack-based Buffer Overflow Vulnerability in JP1 Products. This issue affects JP1/Integrated Management 3 - Manager: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 - Manager: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent Minimal Edition: from 13-00 before 13-50-31; JP1/Base: from 11-00 before 12-50-54. | ||||
| CVE-2026-86576 | 1 Hitachi | 5 Jp1/automatic Job Management System 3 - Agent, Jp1/automatic Job Management System 3 - Agent Minimal Edition, Jp1/automatic Job Management System 3 - Manager and 2 more | 2026-10-30 | 9.4 Critical |
| Heap-based Buffer Overflow Vulnerability in JP1 Products. This issue affects JP1/Integrated Management 3 - Manager: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 - Manager: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent Minimal Edition: from 13-00 before 13-50-31; JP1/Base: from 11-00 before 12-50-54. | ||||
| CVE-2026-76933 | 1 Hitachi | 3 Jp1/automatic Job Management System 3 - Agent, Jp1/automatic Job Management System 3 - Agent Minimal Edition, Jp1/automatic Job Management System 3 - Manager | 2026-10-30 | 9.4 Critical |
| Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job Management System 3 - Manager: from 11-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent: from 11-00 before 13-50-31. | ||||
| CVE-2026-76932 | 1 Hitachi | 3 Jp1/automatic Job Management System 3 - Agent, Jp1/automatic Job Management System 3 - Agent Minimal Edition, Jp1/automatic Job Management System 3 - Manager | 2026-10-30 | 9.4 Critical |
| Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job Management System 3 - Manager: from 11-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent: from 11-00 before 13-50-31. | ||||
| CVE-2026-63402 | 1 I18next | 1 I18next | 2026-10-30 | 5.9 Medium |
| i18next is an internationalization framework for JavaScript. Prior to version 26.3.4, `deepExtend` in `src/utils.js` checks property existence with the in operator and recurses into inherited built-ins reached through `Object.prototype`. An application must explicitly pass attacker-controlled resource data to `addResourceBundle(lng, ns, data, deep, overwrite)` with both `deep: true` and `overwrite: true`. Source keys such as `hasOwnProperty`, `toString` and `valueOf` can then select shared inherited built-in function objects, and a nested value can overwrite a property of those objects process-wide. For example, making `Object.prototype.hasOwnProperty.call` non-callable causes subsequent uses, including i18next internals, to throw TypeError, resulting in unrecoverable denial of service and limited integrity impact. The `__proto__`/`constructor` guard does not prevent this mechanism because the corruption target is an inherited built-in function rather than the prototype object itself. Default calls without deep merging or with overwrite falsy are unaffected, and no standard i18next backend or integration uses the vulnerable configuration. This issue is distinct from the setPath/key-walking prototype-pollution flaws in i18next-fs-backend (CVE-2026-48713) and i18next-http-middleware (CVE-2026-48714). This issue is fixed in version 26.3.4. | ||||
| CVE-2026-76934 | 1 Hitachi | 3 Jp1/automatic Job Management System 3 - Agent, Jp1/automatic Job Management System 3 - Agent Minimal Edition, Jp1/automatic Job Management System 3 - Manager | 2026-10-30 | 9.8 Critical |
| Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job Management System 3 - Manager: from 11-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent: from 11-00 before 13-50-31. | ||||
| CVE-2026-76935 | 1 Hitachi | 1 Jp1/automatic Job Management System 3 - Manager | 2026-10-30 | 9.4 Critical |
| Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job Management System 3 - Manager: from 10-00 before 13-50-31. | ||||
| CVE-2026-76937 | 1 Hitachi | 1 Jp1/automatic Job Management System 3 - Manager | 2026-10-30 | 9.4 Critical |
| Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job Management System 3 - Manager: from 10-00 before 13-50-31. | ||||
| CVE-2026-76936 | 1 Hitachi | 1 Jp1/automatic Job Management System 3 - Manager | 2026-10-30 | 9.4 Critical |
| Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job Management System 3 - Manager: from 10-00 before 13-50-31. | ||||
| CVE-2026-76939 | 1 Hitachi | 2 Jp1/automatic Job Management System 3 - Agent, Jp1/automatic Job Management System 3 - Manager | 2026-10-30 | 9.8 Critical |
| Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job Management System 3 - Manager: from 11-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent: from 11-00 before 13-50-31. | ||||
| CVE-2026-82122 | 1 Hitachi | 2 Hirdb Server, Hirdb Server With Additional Function | 2026-10-30 | 9.4 Critical |
| Stack-based Buffer Overflow Vulnerability in HiRDB. This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-00 through 09-66/V; HiRDB Server Version 9(32): from 09-02 through 09-66-22; HiRDB Server with Additional Function Version 9(32): from 09-00 through 09-66-/V. | ||||
| CVE-2026-82120 | 1 Hitachi | 3 Hirdb Server, Hirdb Server Version, Hirdb Server With Additional Function | 2026-10-30 | 9.8 Critical |
| Heap-based Buffer Overflow Vulnerability in HiRDB. This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-00 through 09-66/V; HiRDB Server Version 9(32): from 09-02 through 09-66-22; HiRDB Server with Additional Function Version 9(32): from 09-00 through 09-66-/V. | ||||