Maple Labs

Maple Labs · CVE search

Every CVE, searchable.

The US government’s National Vulnerability Database, kept on Maple Labs’ own hardware and updated every two hours. Search by CVE, product or words, and filter by severity or CISA’s known-exploited list.

424,000 CVEs, updated from the NVD less than an hour ago.

981–1,000 of 404,843

  1. CVE-2026-120780 high 8.3

    Improper access control in Visual Studio Code allows an unauthorized attacker to execute code over a network.

  2. CVE-2026-120779 critical 9.6

    Improper control of generation of code ('code injection') in Visual Studio Code allows an unauthorized attacker to execute code over a network.

  3. CVE-2026-120778 high 7.3

    Creation of temporary file in directory with insecure permissions in .NET Aspire allows an authorized attacker to elevate privileges locally.

  4. CVE-2026-120006 high 7.5

    Insertion of sensitive information into sent data in .NET Aspire allows an authorized attacker to elevate privileges locally.

  5. CVE-2026-120005 high 8.8

    Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.

  6. CVE-2026-120003 high 8.8

    Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.

  7. CVE-2026-120002 critical 9.9

    Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

  8. CVE-2026-120001 high 8.8

    Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.

  9. CVE-2026-120000 high 7.5

    Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

  10. CVE-2026-119999 medium 6.5

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

  11. CVE-2026-119998 medium 6.5

    Product ui does not warn user of unsafe actions in Microsoft Office allows an unauthorized attacker to bypass a security feature over a network.

  12. CVE-2026-119997 high 7.8

    Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code locally.

  13. CVE-2026-119996 high 7.5

    Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

  14. CVE-2026-119995 high 7.5

    Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

  15. CVE-2026-119993 medium 6.5

    Access of resource using incompatible type ('type confusion') in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network.

  16. CVE-2026-119992 high 7.0

    Double free in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.

  17. CVE-2026-119991 medium 5.9

    Weak authentication in Microsoft Configuration Manager allows an unauthorized attacker to disclose information over a network.

  18. CVE-2026-119990 critical 9.8

    Missing authentication for critical function in Azure OpenAI allows an unauthorized attacker to elevate privileges over a network.

  19. CVE-2026-119989 high 8.2

    Improper neutralization of special elements used in a command ('command injection') in Azure Pipelines allows an authorized attacker to execute code over a network.

  20. CVE-2026-119988 high 7.1

    Numeric truncation error in Windows SMB allows an authorized attacker to execute code over a network.