Maple Labs

Maple Labs · CVE search

Every CVE, searchable.

The US government’s National Vulnerability Database, kept on Maple Labs’ own hardware and updated every two hours. Search by CVE, product or words, and filter by severity or CISA’s known-exploited list.

423,983 CVEs, updated from the NVD 1 hour ago.

901–920 of 404,826

  1. CVE-2026-123378 high 7.5

    Integer overflow or wraparound in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

  2. CVE-2026-123377 high 8.8

    Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

  3. CVE-2026-123376 high 8.8

    Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

  4. CVE-2026-123375 high 8.8

    Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

  5. CVE-2026-122988 high 8.0

    Improper authorization in Windows Admin Center allows an authorized attacker to elevate privileges over a network.

  6. CVE-2026-122987 medium 5.9

    Missing authentication for critical function in Microsoft High Performance Computing (HPC) Pack allows an unauthorized attacker to elevate privileges over a network.

  7. CVE-2026-122986 high 7.8

    Improper privilege management in Microsoft Azure Kubernetes Service allows an authorized attacker to elevate privileges locally.

  8. CVE-2026-122985 medium 6.1

    Improper restriction of xml external entity reference in Microsoft PowerShell allows an unauthorized attacker to disclose information over a network.

  9. CVE-2026-122984 high 7.8

    Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.

  10. CVE-2026-122979 high 8.1

    Improper control of generation of code ('code injection') in Microsoft Teams for Android allows an unauthorized attacker to perform spoofing over a network.

  11. CVE-2026-122518 medium 6.5

    Out-of-bounds read in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.

  12. CVE-2026-122475 high 8.8

    Untrusted pointer dereference in Windows Storage Spaces Controller allows an unauthorized attacker to execute code over a network.

  13. CVE-2026-122474 medium 5.9

    Time-of-check time-of-use (toctou) race condition in Windows Security Account Manager allows an unauthorized attacker to bypass a security feature over a network.

  14. CVE-2026-122297 medium 5.5

    Use of uninitialized resource in Kernel Transaction Manager allows an authorized attacker to disclose information locally.

  15. CVE-2026-122198 high 8.8

    Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.

  16. CVE-2026-122196 medium 6.5

    Improper restriction of xml external entity reference in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to disclose information over a network.

  17. CVE-2026-122194 high 8.8

    Null pointer dereference in Microsoft Defender allows an unauthorized attacker to execute code over a network.

  18. CVE-2026-122183 high 7.8

    Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally.

  19. CVE-2026-122182 high 7.0

    Improper link resolution before file access ('link following') in Windows Maps allows an authorized attacker to elevate privileges locally.

  20. CVE-2026-122179 high 7.0

    Heap-based buffer overflow in Windows Internet Connection Sharing (ICS) allows an authorized attacker to elevate privileges locally.