Maple Labs

Maple Labs · CVE search

Every CVE, searchable.

The US government’s National Vulnerability Database, kept on Maple Labs’ own hardware and updated every two hours. Search by CVE, product or words, and filter by severity or CISA’s known-exploited list.

424,000 CVEs, updated from the NVD less than an hour ago.

961–980 of 404,843

  1. CVE-2026-121671 high 7.0

    Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.

  2. CVE-2026-121670 high 7.0

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

  3. CVE-2026-121669 medium 6.1

    Insufficiently protected credentials in Microsoft PowerShell Core allows an unauthorized attacker to disclose information over a network.

  4. CVE-2026-121668 high 7.7

    Missing authorization in Azure Confidential Clean Rooms allows an authorized attacker to perform tampering over a network.

  5. CVE-2026-121665 high 8.8

    Trust boundary violation in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.

  6. CVE-2026-121664 high 8.3

    Improper neutralization of input during web page generation ('cross-site scripting') in Visual Studio Code allows an unauthorized attacker to execute code over a network.

  7. CVE-2026-121663 high 8.8

    Incomplete list of disallowed inputs in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.

  8. CVE-2026-121662 high 8.6

    Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unauthorized attacker to execute code locally.

  9. CVE-2026-121661 high 7.8

    Incomplete list of disallowed inputs in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

  10. CVE-2026-121660 high 7.5

    Incomplete list of disallowed inputs in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.

  11. CVE-2026-120796 medium 5.3

    Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.

  12. CVE-2026-120792 high 7.3

    Insertion of sensitive information into log file in .NET Aspire allows an authorized attacker to disclose information locally.

  13. CVE-2026-120791 high 8.8

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  14. CVE-2026-120790 high 8.8

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  15. CVE-2026-120789 high 8.8

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  16. CVE-2026-120788 high 8.8

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  17. CVE-2026-120786 high 8.8

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  18. CVE-2026-120785 high 8.8

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  19. CVE-2026-120783 medium 6.4

    Weak authentication in Azure DevOps Server allows an authorized attacker to elevate privileges over a network.

  20. CVE-2026-120782 high 7.8

    Improper control of generation of code ('code injection') in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.