CVE.report
CVE.report is the most up-to-date database of common vulnerabilities and exposures. Information is pulled in from several sources and processed in to a mobile friendly, easy to use page. Use the site to quickly check for vulnerabilities in products such as operating systems, applications, hardware, networks, databases, browsers, e-mail clients and more.
CVEs provide a unique and common naming scheme for publicly known cyber security vulnerabilities in order to quickly identify and share these vulnerabilities. You can use the search below to look for vulnerabilities based on product, vendor, or common tags
The form you will see after following this link allows you to fill out the various variables in the CVSS scoring system and receive the corresponding score. The description of each of the variables is also included for additional information.
cve.report now provides a free read-only JSON API for CVE details. Each record combines the CVE Program JSON record, NVD enrichment, KEV, and EPSS when available.
Recent CVEs
| CVE | Description | Updated |
|---|---|---|
| CVE-2026-126546 json | Viber for iOS through 29.4.0.24 fails to validate the logical screen width and height in received GIF headers, allowing attac... | |
| CVE-2026-126545 json | WWBN AVideo through 29.7.1 contains a missing authorization vulnerability in API::get_api_tags() in plugin/API/API.php that a... | |
| CVE-2026-126544 json | WWBN AVideo 6.5 through 29.7.1 contains an email verification bypass vulnerability in User::verifyCode() in objects/user.php ... | |
| CVE-2026-126543 json | WWBN AVideo through 29.7.1 contains an improper payment verification vulnerability in plugin/PayPalYPT/ipnV2.php that credits... | |
| CVE-2026-126542 json | WWBN AVideo 6.5 through 29.7.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to log i... | |
| CVE-2026-126541 json | WWBN AVideo through 29.7.1 contains a missing authorization vulnerability in Live plugin restream endpoints that allows authe... | |
| CVE-2026-126539 json | Directus before 12.1.0 contains an authorization bypass vulnerability that allows unauthenticated attackers to skip permissio... | |
| CVE-2026-126499 json | Jellyfin before 12.0 contains a path traversal vulnerability in the DELETE /Library/VirtualFolders and POST /Library/VirtualF... | |
| CVE-2026-126498 json | WriteFreely before 0.17.3 contains a stored cross-site scripting vulnerability that allows authenticated authors to inject HT... | |
| CVE-2026-126497 json | LibreCAD through 2.2.1.6 contains a heap-based out-of-bounds write vulnerability in the bundled libdxfrw dwgReader18::parseDa... | |
| CVE-2026-126496 json | 1Panel-dev CordysCRM before 1.9.6 contains an authorization bypass vulnerability in CustomerContactController.get that allows... | |
| CVE-2026-126495 json | MQTTX desktop through 1.13.3 contains a stored cross-site scripting vulnerability that allows attackers to inject script by p... | |
| CVE-2026-95404 json | In multiple locations, there is a possible way to modify coprocessor instruction and data memory from non-secure software due... | |
| CVE-2026-59623 json | In CompareTelUris of SipAddress.cpp, there is a possible way to trigger an unhandled out of range exception and process crash... | |
| CVE-2026-59613 json | In multiple locations, there is a possible way to trigger an out of bounds read and temporary denial of service due to improp... | |
| CVE-2026-59611 json | In multiple locations, there is a possible way to trigger a temporary denial of service via an integer overflow trap due to i... | |
| CVE-2026-59603 json | In RespondReceivedMessage of MtsMessageController.cpp, there is a possible way to trigger a double free and process abort dur... | |
| CVE-2026-59595 json | In DecodeHeaderComponent of SipStack.cpp, there is a possible way to trigger stack exhaustion via unbounded mutual recursion ... | |
| CVE-2026-59582 json | In StartTimer of UcePublishManager.cpp, there is a possible way to trigger a process abort during timer calculation due to an... | |
| CVE-2026-97013 json | Access of resource using incompatible type ('type confusion') in Windows Shell allows an authorized attacker to elevate privi... | |
| CVE-2026-97002 json | Out-of-bounds read in Windows VMSwitch allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-97000 json | Null pointer dereference in Windows USM Communication Manager allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-96994 json | Use after free in Winsock allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-96992 json | Use after free in Windows PCI Bus Driver allows an unauthorized attacker to elevate privileges with a physical attack. | |
| CVE-2026-58809 json | In smmu_domain_config_s1 of arm-smmu-v3.c, there is a possible OOB Write due to a missing bounds check. This could lead to lo... | |
| CVE-2026-58807 json | In Retry_MtsMessageInPending of MtsMessageController.cpp, there is a possible way to trigger memory exhaustion via leaked mes... | |
| CVE-2026-58785 json | In update_user_consent of main.rs, there is a possible elevation of privilege due to uninitialized data. This could lead to l... | |
| CVE-2026-58781 json | In HostLinkBase::chreIpiHandler of host_link.cc, there is a possible out-of-bounds write due to a missing bounds check. This ... | |
| CVE-2026-58778 json | In multiple locations, there is a possible use-after-free due to a race condition. This could lead to local escalation of pri... | |
| CVE-2026-58729 json | In multiple files, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation... | |
| CVE-2026-57013 json | In access_control_enable of multiple files, there is a possible way to release secure coprocessors from reset via unclaimed f... | |
| CVE-2026-56949 json | In multiple locations, there is a possible way to modify authenticated coprocessor firmware in shared memory before loading d... | |
| CVE-2026-56911 json | In handle_fips_hmac_req of hwcrypto_proxy.c, there is a possible heap buffer overflow due to missing bounds check. This could... | |
| CVE-2026-56884 json | In ac_set_ns_ipa_tbl of plat_trusty.c, there is a possible way to corrupt stream table entry configurations via unvalidated p... | |
| CVE-2026-55346 json | In km_read_data_response of keymaster.c, there is a possible way to trigger an out of bounds write on the heap due to a missi... | |
| CVE-2026-55297 json | In handle_chan_msg of tipc_virtio_dev.c, there is a possible way to bypass memory tag access controls via concurrent shared m... | |
| CVE-2026-96982 json | Integer overflow or wraparound in HID Parser Library allows an unauthorized attacker to elevate privileges with a physical at... | |
| CVE-2026-96981 json | Out-of-bounds write in Windows PCI Bus Driver allows an unauthorized attacker to elevate privileges with a physical attack. | |
| CVE-2026-96979 json | Integer overflow or wraparound in HID Parser Library allows an unauthorized attacker to elevate privileges with a physical at... | |
| CVE-2026-96978 json | Use after free in Windows Credential User Interface allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-96974 json | Integer overflow or wraparound in HID Parser Library allows an unauthorized attacker to elevate privileges with a physical at... | |
| CVE-2026-96973 json | Use after free in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-96971 json | Use after free in Windows NetBIOS allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-96969 json | Double free in Windows TCP/IP allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-96845 json | Improper authorization in Windows Task Scheduler allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-96184 json | Heap-based buffer overflow in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges loca... | |
| CVE-2026-96179 json | Use after free in DNS Server allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-96175 json | Release of invalid pointer or reference in Desktop Window Manager allows an authorized attacker to elevate privileges locally... | |
| CVE-2026-96174 json | Release of invalid pointer or reference in Desktop Window Manager allows an authorized attacker to elevate privileges locally... | |
| CVE-2026-96172 json | No cwe for this issue in Desktop Window Manager allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-96171 json | Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-96168 json | Untrusted pointer dereference in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-96162 json | Incorrect authorization in Windows Clipboard Virtual Channel Extension allows an authorized attacker to elevate privileges lo... | |
| CVE-2026-96160 json | Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-96158 json | Use of uninitialized resource in Microsoft ActiveX Installer Service allows an authorized attacker to elevate privileges loca... | |
| CVE-2026-96155 json | Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-96153 json | Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-96152 json | Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-96139 json | Untrusted pointer dereference in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-96129 json | Inclusion of functionality from untrusted control sphere in Windows Kernel allows an authorized attacker to elevate privilege... | |
| CVE-2026-96127 json | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-96126 json | Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-96124 json | Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-96122 json | Untrusted pointer dereference in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-96117 json | Heap-based buffer overflow in Windows LUAFV allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-96107 json | Null pointer dereference in Windows Phone Service allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-96103 json | Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-96102 json | Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-96097 json | Release of invalid pointer or reference in Windows Brokering File System allows an authorized attacker to elevate privileges ... | |
| CVE-2026-96088 json | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected User Experie... | |
| CVE-2026-96085 json | Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-96084 json | Heap-based buffer overflow in Graphic Fonts allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-96076 json | Use after free in Windows DIAL Client allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-96075 json | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Feedback Hub allows an... | |
| CVE-2026-96074 json | Heap-based buffer overflow in Windows AppX Package Manager allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-96073 json | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-96072 json | Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locall... | |
| CVE-2026-96066 json | Stack-based buffer overflow in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to el... | |
| CVE-2026-96062 json | Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-96061 json | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-96060 json | Out-of-bounds read in Windows Installer allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-96057 json | Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-96056 json | Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-96055 json | Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-96053 json | Improper neutralization of special elements used in a command ('command injection') in Windows Task Scheduler allows an autho... | |
| CVE-2026-96052 json | Integer underflow (wrap or wraparound) in Windows Kernel allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-96051 json | Out-of-bounds read in Windows USB Driver allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-96047 json | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-96046 json | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-96043 json | Use after free in Windows Connection Manager Service allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-96042 json | Use after free in Windows Connection Manager Service allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-96038 json | Inclusion of functionality from untrusted control sphere in Windows Audio Service allows an authorized attacker to elevate pr... | |
| CVE-2026-96037 json | Heap-based buffer overflow in Windows User Manager Service allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-96036 json | Integer overflow or wraparound in Windows Installer allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-96035 json | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-96031 json | Out-of-bounds write in Windows Kernel allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-96029 json | Improper access control in Windows Installer allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-96028 json | Access of resource using incompatible type ('type confusion') in Windows Installer allows an authorized attacker to elevate p... | |
| CVE-2026-96027 json | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-96026 json | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |