Skip to content
statance
MenuClose
Log inStart for free ↗

Public CVE feed

Public CVE records, affected versions and known exploitation, with sources you can verify.

Subscribe with RSS ↗
Showing 151–180 of 196 recordsLast successful sync: 2026-11-01 01:55 UTC
high · 7.5
CVE-2026-69998

Remote Desktop Client Remote Code Execution Vulnerability

Windows 10 Version 1607 · Windows 10 Version 1809 · Windows 10 Version 21H2

high · 7.5
CVE-2026-69992

Remote Desktop Services Remote Code Execution Vulnerability

Windows 10 Version 1607 · Windows 10 Version 1809 · Windows 10 Version 21H2

high · 7.5
CVE-2026-69994

Remote Desktop Client Remote Code Execution Vulnerability

Windows 10 Version 1607 · Windows 10 Version 1809 · Windows 10 Version 21H2

high · 7.5
CVE-2026-69991

Remote Desktop Client Remote Code Execution Vulnerability

Windows 10 Version 1607 · Windows 10 Version 1809 · Windows 10 Version 21H2

high · 7.5
CVE-2026-69996

Remote Desktop Client Remote Code Execution Vulnerability

Windows 10 Version 1607 · Windows 10 Version 1809 · Windows 10 Version 21H2

high · 7.5
CVE-2026-69997

Remote Desktop Client Remote Code Execution Vulnerability

Windows 10 Version 1607 · Windows 10 Version 1809 · Windows 10 Version 21H2

high · 7.5
CVE-2026-69995

Remote Desktop Client Remote Code Execution Vulnerability

Windows 10 Version 1607 · Windows 10 Version 1809 · Windows 10 Version 21H2

high · 7.5
CVE-2026-69987

Remote Desktop Client Remote Code Execution Vulnerability

Windows 10 Version 1607 · Windows 10 Version 1809 · Windows 10 Version 21H2

high · 7.5
CVE-2026-69988

Remote Desktop Client Remote Code Execution Vulnerability

Windows 10 Version 1607 · Windows 10 Version 1809 · Windows 10 Version 21H2

high · 7.5
CVE-2026-69986

Remote Desktop Client Remote Code Execution Vulnerability

Windows 10 Version 1607 · Windows 10 Version 1809 · Windows 10 Version 21H2

high · 8.8
CVE-2026-69985

Windows libarchive Remote Code Execution Vulnerability

Windows 10 Version 1809 · Windows 10 Version 21H2 · Windows 10 Version 22H2

high · 7.5
CVE-2026-69984

Remote Desktop Client Remote Code Execution Vulnerability

Windows 10 Version 1607 · Windows 10 Version 1809 · Windows 10 Version 21H2

high · 7.8
CVE-2026-69880

Desktop Window Manager Elevation of Privilege Vulnerability

Windows 10 Version 1809 · Windows 10 Version 21H2 · Windows 10 Version 22H2

high · 7
CVE-2026-69856

Windows Storage Elevation of Privilege Vulnerability

Windows 10 Version 1809 · Windows 10 Version 21H2 · Windows 10 Version 22H2

high · 7
CVE-2026-69931

Windows Storage Elevation of Privilege Vulnerability

Windows 10 Version 1809 · Windows 10 Version 21H2 · Windows 10 Version 22H2

medium · 5.5
CVE-2026-62687

Windows Backup Engine Information Disclosure Vulnerability

Windows 10 Version 21H2 · Windows 10 Version 22H2 · Windows 11 version 23H2

medium · 5.5
CVE-2026-62879

Windows SmartScreen Tampering Vulnerability

Windows 10 Version 1809 · Windows 10 Version 21H2 · Windows 10 Version 22H2

medium · 6.8
CVE-2026-59116

Windows Remote Desktop Security Feature Bypass Vulnerability

Windows 10 Version 1607 · Windows 10 Version 1809 · Windows 10 Version 21H2

high · 7.1
CVE-2026-69452

Windows Enterprise App Management Elevation of Privilege Vulnerability

Windows 10 Version 1607 · Windows 10 Version 1809 · Windows 10 Version 21H2

critical · 10Known exploitation
CVE-2026-97229

Integer Overflow or Wraparound in GitLab

GitLab

critical · 9.6
CVE-2026-69435

Azure SRE Agent Elevation of Privilege Vulnerability

Azure SRE Agent

high · 8.8
CVE-2026-86404

Artemis-server: artemis-jms-client: artemis-core-client: undertow-core: wildfly-messaging-activemq-subsystem: artemis messaging handlers in red hat eap permit deserialization by de

org.apache.activemq/artemis-server · eap8-activemq-artemis · eap8-apache-cxf

high · 7.5
CVE-2026-33818

Enforce maximum recursion depth in encoding/asn1

encoding/asn1

high · 7.5
CVE-2026-15567

Wildfly: wildfly-iiop: wildfly-jacorb: wildfly: pre-auth denial of service on the iiop listener

Red Hat JBoss Enterprise Application Platform 7.4.25 · eap7-activemq-artemis · eap7-glassfish-jsf

high · 7.5
CVE-2026-15565

Undertow: undertow-websockets: undertow: pre-auth dos on websocket endpoint with @serverendpoint class with any @onmessage method

Red Hat JBoss Enterprise Application Platform 7.4.25 · eap7-activemq-artemis · eap7-glassfish-jsf

high · 7.4
CVE-2026-15563

Wildfly-iiop-openjdk: missing authentication on eap's iiop nameservice leads to mitm or dos

Red Hat JBoss Enterprise Application Platform 7.4.25 · eap7-activemq-artemis · eap7-glassfish-jsf

high · 7.5
CVE-2026-15562

Jboss-remoting: jboss-remoting: integer overflow in messagereader leads to pre-authentication denial of service

jboss-remoting · eap7-activemq-artemis · eap7-glassfish-jsf

high · 7.5
CVE-2026-15561

Undertow-core: oom via missing limits in chunked trailer in eap's undertow

Red Hat JBoss Enterprise Application Platform 7.4.25 · eap7-activemq-artemis · eap7-glassfish-jsf

high · 8.1
CVE-2026-15560

Openjdk-orb: unauthed class loading via iiop in eap

openjdk-orb · eap7-activemq-artemis · eap7-glassfish-jsf

high · 8.1
CVE-2026-15556

Picketlink-federation: picketlink saml 2.0 auth bypass via missing assertions

Red Hat JBoss Enterprise Application Platform 7.4.25 · eap7-activemq-artemis · eap7-glassfish-jsf

Sources: official CVE Program records and CISA KEV. The catalogue starts with recently changed records and selected exploited CVEs, and grows through exact-ID lookups. It is not a complete copy of the CVE List. Updates are attempted hourly.