Vulnerability intelligence

Explore. Understand.
Stay ahead.

A clearer way to explore known software vulnerabilities. Search CVE records, review severity and CVSS scores, and keep track of the issues that matter to you.

Independent vulnerability information and monitoring project

Search the vulnerability database

Find a CVE by ID, keyword, severity or CVSS score.

Centralized CVE data
Browse vulnerability records collected from public sources.
Severity at a glance
Compare severity levels and available CVSS scores.
Personal email alerts
Create alert preferences for critical issues and custom matches.
Browse the database

Latest vulnerability records

52 904
matching records · page 694 of 2117
CVE-2026-103852 MEDIUM CVSS 5.53.1

Substance3D - Stager is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Published: 13 Oct 2026 Updated: 10 Nov 2026 View details →
CVE-2026-103851 HIGH CVSS 7.83.1

Substance3D - Stager is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Published: 13 Oct 2026 Updated: 10 Nov 2026 View details →
CVE-2026-103850 MEDIUM CVSS 5.53.1

Substance3D - Stager is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Published: 13 Oct 2026 Updated: 10 Nov 2026 View details →
CVE-2026-103848 CRITICAL CVSS 9.93.1

Adobe Experience Manager is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.

Published: 13 Oct 2026 Updated: 10 Nov 2026 View details →
CVE-2026-103847 HIGH CVSS 8.63.1

Dimension is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. A local attacker with user permissions could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must run the application. Scope is changed.

Published: 13 Oct 2026 Updated: 10 Nov 2026 View details →
CVE-2026-103846 HIGH CVSS 8.63.1

Dimension is affected by an Improper Neutralization of Input During Web Page Generation vulnerability that could result in arbitrary code execution in the context of the current user. A local attacker with user permissions could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must run the application. Scope is changed.

Published: 13 Oct 2026 Updated: 10 Nov 2026 View details →
CVE-2026-103845 HIGH CVSS 8.63.1

Dimension is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. A local attacker with user permissions could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must run the application. Scope is changed.

Published: 13 Oct 2026 Updated: 10 Nov 2026 View details →
CVE-2026-103844 HIGH CVSS 7.83.1

Dimension is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Published: 13 Oct 2026 Updated: 10 Nov 2026 View details →
CVE-2026-103843 HIGH CVSS 7.83.1

Substance3D - Stager is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Published: 13 Oct 2026 Updated: 20 Oct 2026 View details →
CVE-2026-103842 HIGH CVSS 7.83.1

Substance3D - Stager is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Published: 13 Oct 2026 Updated: 20 Oct 2026 View details →
CVE-2026-103841 HIGH CVSS 7.83.1

Substance3D - Stager is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Published: 13 Oct 2026 Updated: 20 Oct 2026 View details →
CVE-2026-103840 HIGH CVSS 7.83.1

Substance3D - Stager is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Published: 13 Oct 2026 Updated: 20 Oct 2026 View details →
CVE-2026-103839 HIGH CVSS 7.83.1

Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Published: 13 Oct 2026 Updated: 19 Oct 2026 View details →
CVE-2026-103838 HIGH CVSS 7.83.1

Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Published: 13 Oct 2026 Updated: 19 Oct 2026 View details →
CVE-2026-103837 HIGH CVSS 7.83.1

Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Published: 13 Oct 2026 Updated: 19 Oct 2026 View details →
CVE-2026-103836 HIGH CVSS 7.83.1

Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Published: 13 Oct 2026 Updated: 19 Oct 2026 View details →
CVE-2026-103835 HIGH CVSS 7.83.1

Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Published: 13 Oct 2026 Updated: 19 Oct 2026 View details →
CVE-2026-103834 HIGH CVSS 7.83.1

Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Published: 13 Oct 2026 Updated: 19 Oct 2026 View details →
CVE-2026-103833 HIGH CVSS 7.83.1

Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Published: 13 Oct 2026 Updated: 19 Oct 2026 View details →
CVE-2026-103832 HIGH CVSS 7.83.1

Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Published: 13 Oct 2026 Updated: 19 Oct 2026 View details →
CVE-2026-103830 HIGH CVSS 7.83.1

Substance3D - Stager is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Published: 13 Oct 2026 Updated: 19 Oct 2026 View details →
CVE-2026-102855 HIGH CVSS 8.83.1

Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.

Published: 13 Oct 2026 Updated: 20 Oct 2026 View details →
CVE-2026-102238 CRITICAL CVSS 9.63.1

Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an unauthorized attacker to execute code over a network.

Published: 13 Oct 2026 Updated: 10 Nov 2026 View details →
CVE-2026-102235 HIGH CVSS 8.83.1

Improper encoding or escaping of output in Visual Studio Code allows an unauthorized attacker to execute code over a network.

Published: 13 Oct 2026 Updated: 10 Nov 2026 View details →
CVE-2026-102234 HIGH CVSS 7.53.1

Reliance on untrusted inputs in a security decision in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.

Published: 13 Oct 2026 Updated: 10 Nov 2026 View details →