Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (513 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-62835 1 Microsoft 1 Azure Portal 2026-07-25 9.3 Critical
Improper authorization in Azure Portal allows an unauthorized attacker to disclose information over a network.
CVE-2026-58630 1 Microsoft 2 Azure App Service, Azure App Service For Linux 2026-07-24 10 Critical
Improper access control in Azure App Service allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-58275 1 Microsoft 1 Azure Dns 2026-07-24 10 Critical
Missing authorization in Azure DNS allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-62825 1 Microsoft 1 Azure Key Vault 2026-07-24 10 Critical
Improper authentication in Azure Key Vault allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-56160 1 Microsoft 1 Azure Red Hat Openshift 2026-07-24 9.1 Critical
Improper authorization in Azure Red Hat OpenShift (ARO) allows an authorized attacker to elevate privileges over a network.
CVE-2026-56163 1 Microsoft 1 Azure Kubernetes Service 2026-07-24 10 Critical
Missing authentication for critical function in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-50653 1 Microsoft 15 .net, .net Framework, Azure Active Directory and 12 more 2026-07-22 7.5 High
Loop with unreachable exit condition ('infinite loop') in Azure Active Directory allows an unauthorized attacker to deny service over a network.
CVE-2026-50652 1 Microsoft 15 .net, .net Framework, Azure Active Directory and 12 more 2026-07-22 7.5 High
Deserialization of untrusted data in Azure Active Directory allows an unauthorized attacker to deny service over a network.
CVE-2026-57969 1 Microsoft 1 Azure Cyclecloud 2026-07-15 8.8 High
Missing authentication for critical function in Azure CycleCloud allows an authorized attacker to elevate privileges over a network.
CVE-2026-50338 1 Microsoft 2 Azure Spring Apps, Azure Spring Cloud 2026-07-14 8.2 High
Improper authentication in Azure Spring Apps allows an authorized attacker to elevate privileges over a network.
CVE-2026-58279 1 Microsoft 1 Azure Cyclecloud 2026-07-14 6.5 Medium
Missing authorization in Azure CycleCloud allows an authorized attacker to elevate privileges over a network.
CVE-2026-26145 1 Microsoft 1 Azure Synapse 2026-07-06 4.8 Medium
Improper access control in Azure Synapse allows an authorized attacker to elevate privileges over a network.
CVE-2026-45499 1 Microsoft 3 Azure Open-ai, Azure Open-ai, Azure Openai 2026-07-06 9.9 Critical
Server-side request forgery (ssrf) in Azure OpenAI allows an authorized attacker to elevate privileges over a network.
CVE-2026-32174 1 Microsoft 1 Azure Ai Bot Service 2026-06-23 7.7 High
Improper authentication in Azure Bot Service allows an authorized attacker to elevate privileges over a network.
CVE-2026-48584 1 Microsoft 1 Azure Synapse 2026-06-22 9.9 Critical
Execution with unnecessary privileges in Azure Synapse allows an authorized attacker to elevate privileges over a network.
CVE-2026-45480 1 Microsoft 1 Azure Active Directory 2026-06-22 10 Critical
Improper authentication in Azure Active Directory allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-47633 1 Microsoft 3 Azure Cost Management, Azure Cost Management, Cost Management 2026-06-22 7.5 High
Exposure of sensitive information to an unauthorized actor in Cost Management Interactive Experiences allows an unauthorized attacker to disclose information over a network.
CVE-2026-47643 1 Microsoft 1 Azure Stack Edge 2026-06-10 9.8 Critical
External control of file name or path in Azure Stack Edge allows an unauthorized attacker to execute code over a network.
CVE-2026-45476 1 Microsoft 3 Azure Network Adapter, Linux Kernel - Microsoft Mana Network Driver, Linux Kernel Mana Network Driver 2026-06-10 8.2 High
Use after free in Linux MANA Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-32193 1 Microsoft 1 Azure Kubernetes Service 2026-06-10 8.8 High
Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Azure Kubernetes Service allows an authorized attacker to execute code locally.