Maple Labs

Maple Labs · CVE search

Every CVE, searchable.

The US government’s National Vulnerability Database, kept on Maple Labs’ own hardware and updated every two hours. Search by CVE, product or words, and filter by severity or CISA’s known-exploited list.

423,983 CVEs, updated from the NVD 1 hour ago.

1–20 of 17,856

  1. CVE-2026-124194 medium 6.5 Known exploited

    Product ui does not warn user of unsafe actions in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network.

  2. CVE-2026-69446 medium 4.4

    Incorrect authorization in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate privileges locally.

  3. CVE-2026-96203 high 8.8

    Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.

  4. CVE-2026-96199 high 8.8

    Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

  5. CVE-2026-96198 high 8.8

    Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

  6. CVE-2026-96196 high 8.8

    Incomplete list of disallowed inputs in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network.

  7. CVE-2026-96192 high 8.8

    Use after free in Microsoft Edge for iOS allows an unauthorized attacker to execute code over a network.

  8. CVE-2026-96187 high 7.4

    Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.

  9. CVE-2026-88090 medium 5.4

    Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.

  10. CVE-2026-88078 medium 4.3

    Improper verification of cryptographic signature in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

  11. CVE-2026-88077 high 8.8

    Integer overflow or wraparound in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.

  12. CVE-2026-85899 high 8.1

    Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate privileges over a network.

  13. CVE-2026-85897 high 8.8

    Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

  14. CVE-2026-85890 high 8.8

    Double free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

  15. CVE-2026-85330 medium 4.3

    Incorrect authorization in Microsoft Edge for Android allows an unauthorized attacker to bypass a security feature over a network.

  16. CVE-2026-20942 medium 4.3

    Improper restriction of rendered ui layers or frames in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

  17. CVE-2026-62765 high 8.1

    Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

  18. CVE-2026-85898 high 8.8

    Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

  19. CVE-2026-83831 high 8.8

    Double free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

  20. CVE-2026-111497 critical 9.2 Known exploited

    A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream. Users need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1.