Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (511 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2021-42306 1 Microsoft 4 Azure Active Directory, Azure Active Site Recovery, Azure Automation and 1 more 2026-08-19 8.1 High
An information disclosure vulnerability manifests when a user or an application uploads unprotected private key data as part of an authentication certificate keyCredential  on an Azure AD Application or Service Principal (which is not recommended). This vulnerability allows a user or service in the tenant with application read access to read the private key data that was added to the application. Azure AD addressed this vulnerability by preventing disclosure of any private key values added to the application. Microsoft has identified services that could manifest this vulnerability, and steps that customers should take to be protected. Refer to the FAQ section for more information. For more details on this issue, please refer to the MSRC Blog Entry.
CVE-2021-26444 1 Microsoft 1 Azure Real Time Operating System 2026-08-19 3.3 Low
Azure RTOS Information Disclosure Vulnerability
CVE-2021-42323 1 Microsoft 1 Azure Real Time Operating System 2026-08-19 3.3 Low
Azure RTOS Information Disclosure Vulnerability
CVE-2021-41376 1 Microsoft 1 Azure Sphere 2026-08-19 2.3 Low
Azure Sphere Information Disclosure Vulnerability
CVE-2021-41375 1 Microsoft 1 Azure Sphere 2026-08-19 4.4 Medium
Azure Sphere Information Disclosure Vulnerability
CVE-2021-41374 1 Microsoft 1 Azure Sphere 2026-08-19 6.7 Medium
Azure Sphere Information Disclosure Vulnerability
CVE-2021-42304 1 Microsoft 1 Azure Real Time Operating System 2026-08-19 6.6 Medium
Azure RTOS Elevation of Privilege Vulnerability
CVE-2021-42303 1 Microsoft 1 Azure Real Time Operating System 2026-08-19 6.6 Medium
Azure RTOS Elevation of Privilege Vulnerability
CVE-2021-42302 1 Microsoft 1 Azure Real Time Operating System 2026-08-19 6.6 Medium
Azure RTOS Elevation of Privilege Vulnerability
CVE-2021-42301 1 Microsoft 2 Azure Real Time Operating System, Azure Rtos 2026-08-19 3.3 Low
Azure RTOS Information Disclosure Vulnerability
CVE-2021-42300 1 Microsoft 1 Azure Sphere 2026-08-19 6 Medium
Azure Sphere Tampering Vulnerability
CVE-2026-47632 1 Microsoft 2 Azure Connected Machine Agent, Azure Monitor Agent Metrics Extension 2026-08-18 8.8 High
Improper certificate validation in Azure Connected Machine Agent allows an unauthorized attacker to elevate privileges over an adjacent network.
CVE-2026-63522 1 Microsoft 1 Azure Sql Database 2026-08-17 7.8 High
Incorrect permission assignment for critical resource in Azure SQL Database allows an authorized attacker to elevate privileges locally.
CVE-2026-35425 1 Microsoft 1 Azure Api Management 2026-08-17 8 High
Improper access control in Azure API Management (APIM) allows an authorized attacker to execute code over a network.
CVE-2026-47299 1 Microsoft 2 Azure Monitor Agent, Azure Monitor Agent Linux Extension 2026-08-13 7.2 High
Improper neutralization of special elements used in a command ('command injection') in Azure Monitor Agent allows an authorized attacker to elevate privileges over a network.
CVE-2026-50516 1 Microsoft 1 Azure Kubernetes Service 2026-08-12 9.4 Critical
Missing authentication for critical function in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-65806 1 Microsoft 1 Azure Cyclecloud 2026-08-12 6.5 Medium
Missing authorization in Azure CycleCloud allows an authorized attacker to disclose information over a network.
CVE-2026-70340 1 Microsoft 1 Azure Cyclecloud 2026-08-12 8.1 High
Missing authorization in Azure CycleCloud allows an authorized attacker to elevate privileges over a network.
CVE-2026-57104 1 Microsoft 1 Azure Storage Explorer 2026-08-12 8.8 High
Improper neutralization of input during web page generation ('cross-site scripting') in Azure Storage Explorer allows an unauthorized attacker to elevate privileges over a network.
CVE-2023-44487 33 Akka, Amazon, Apache and 30 more 378 Http Server, Opensearch Data Prepper, Apisix and 375 more 2026-08-11 7.5 High
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.