Maple Labs

Maple Labs · CVE search

Every CVE, searchable.

The US government’s National Vulnerability Database, kept on Maple Labs’ own hardware and updated every two hours. Search by CVE, product or words, and filter by severity or CISA’s known-exploited list.

423,983 CVEs, updated from the NVD 1 hour ago.

801–820 of 404,826

  1. CVE-2026-85942 high 7.8

    Heap-based buffer overflow in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally.

  2. CVE-2026-85929 high 7.8

    Incorrect permission assignment for critical resource in Windows Brokering File System allows an authorized attacker to elevate privileges locally.

  3. CVE-2026-85923 high 8.8

    Authorization bypass through user-controlled key in Azure DevOps Server allows an authorized attacker to elevate privileges over a network.

  4. CVE-2026-85907 medium 4.4

    Improper authentication in Windows SSDP Service allows an authorized attacker to elevate privileges locally.

  5. CVE-2026-85862 high 7.0

    Double free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

  6. CVE-2026-85844 critical 9.8

    Authentication bypass using an alternate path or channel in Windows Kerberos allows an unauthorized attacker to elevate privileges over a network.

  7. CVE-2026-85839 high 8.8

    Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network.

  8. CVE-2026-85838 high 8.8

    Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network.

  9. CVE-2026-85801 high 7.8

    Use after free in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.

  10. CVE-2026-84010 high 7.5

    Exposed dangerous method or function in SQL Server allows an authorized attacker to elevate privileges over a network.

  11. CVE-2026-84005 medium 5.5

    Processor optimization removal or modification of security-critical code in AMD Zen allows an authorized attacker to disclose information locally.

  12. CVE-2026-84004 medium 5.5

    Processor optimization removal or modification of security-critical code in AMD Zen allows an authorized attacker to disclose information locally.

  13. CVE-2026-83953 medium 5.5

    Improper neutralization of special elements used in a command ('command injection') in Github Copilot allows an authorized attacker to disclose information locally.

  14. CVE-2026-83894 high 7.0

    Use after free in RPC Runtime allows an authorized attacker to elevate privileges locally.

  15. CVE-2026-83684 high 7.5

    Buffer over-read in Windows iSCSI Target Service allows an unauthorized attacker to disclose information over a network.

  16. CVE-2026-83563 high 7.8

    Heap-based buffer overflow in Winlogon allows an authorized attacker to elevate privileges locally.

  17. CVE-2026-81384 high 8.1

    Heap-based buffer overflow in DNS Server allows an unauthorized attacker to execute code over a network.

  18. CVE-2026-80095 critical 9.0

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

  19. CVE-2026-80094 high 7.5

    Use after free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges over a network.

  20. CVE-2026-72998 high 8.1

    Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.