Maple Labs

Maple Labs · CVE search

Every CVE, searchable.

The US government’s National Vulnerability Database, kept on Maple Labs’ own hardware and updated every two hours. Search by CVE, product or words, and filter by severity or CISA’s known-exploited list.

424,000 CVEs, updated from the NVD less than an hour ago.

1,001–1,020 of 404,843

  1. CVE-2026-119987 high 7.8

    Untrusted search path in Microsoft Windows App Store allows an authorized attacker to elevate privileges locally.

  2. CVE-2026-119986 high 8.8

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  3. CVE-2026-119985 high 8.3

    Incorrect authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network.

  4. CVE-2026-119983 high 8.8

    Server-side request forgery (ssrf) in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.

  5. CVE-2026-119982 medium 6.5

    Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.

  6. CVE-2026-119981 high 7.0

    Missing authentication for critical function in Visual Studio Code allows an authorized attacker to elevate privileges locally.

  7. CVE-2026-119976 medium 6.5

    External control of file name or path in Visual Studio Code - GitHub Pull Requests and Issues Extension allows an unauthorized attacker to disclose information over a network.

  8. CVE-2026-119975 high 8.8

    Improper neutralization of input during web page generation ('cross-site scripting') in Visual Studio Code allows an unauthorized attacker to execute code over a network.

  9. CVE-2026-119974 high 7.0

    Time-of-check time-of-use (toctou) race condition in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

  10. CVE-2026-119972 medium 5.9

    Uncontrolled resource consumption in Windows Remote Procedure Call allows an unauthorized attacker to deny service over a network.

  11. CVE-2026-119971 medium 4.9

    Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.

  12. CVE-2026-119970 medium 4.9

    Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.

  13. CVE-2026-119969 high 8.8

    Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.

  14. CVE-2026-119967 high 8.1

    Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network.

  15. CVE-2026-119966 high 7.5

    Integer overflow or wraparound in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

  16. CVE-2026-119965 medium 6.4

    Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

  17. CVE-2026-119964 high 8.1

    Double free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.

  18. CVE-2026-119963 high 8.1

    Double free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.

  19. CVE-2026-119962 high 8.1

    Double free in Windows Cred SSProvider Protocol allows an unauthorized attacker to execute code over a network.

  20. CVE-2026-119961 high 8.1

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Internet Information Services allows an unauthorized attacker to execute code over a network.