Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.

Latest Critical Actively Exploited Remotely Exploitable

9.8

CRITICAL

CVE-2020-37153

ASTPP 4.0.1 contains multiple vulnerabilities including cross-site scripting and command injection in SIP device configuration and plugin management interfaces. Attackers can exploit these flaws to inject system commands, hijack administrator sessions, an...

Affected Products :
Published: Feb. 11, 2026

Modified: Feb. 11, 2026

Vuln Type: Cross-Site Scripting
8.7

HIGH

CVE-2020-37104

ASTPP 4.0.1 contains an information disclosure vulnerability that allows unauthenticated attackers to download database backup files by predicting backup filename patterns. Attackers can generate a list of 6-digit PIN combinations and fuzz the backup down...

Affected Products :
Published: Feb. 11, 2026

Modified: Feb. 11, 2026

Vuln Type: Information Disclosure
5.1

MEDIUM

CVE-2019-25313

FlexNet Publisher 11.12.1 contains a cross-site request forgery vulnerability that allows attackers to create administrative user accounts without authentication. Attackers can craft a malicious HTML form to trick authenticated users into submitting a req...

Affected Products :
Published: Feb. 11, 2026

Modified: Feb. 11, 2026

Vuln Type: Cross-Site Request Forgery
8.8

HIGH

CVE-2026-21229

Improper input validation in Power BI allows an authorized attacker to execute code over a network....

Affected Products : power_bi_report_server
Published: Feb. 10, 2026

Modified: Feb. 11, 2026

Vuln Type: Injection
7.5

HIGH

CVE-2024-4147

In lunary-ai/lunary version 1.2.13, an insufficient granularity of access control vulnerability allows users to delete prompts created in other organizations through ID manipulation. The vulnerability stems from the application's failure to validate the o...

Affected Products : lunary
Published: Feb. 02, 2026

Modified: Feb. 11, 2026

Vuln Type: Authorization
7.8

HIGH

CVE-2026-21231

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileges locally....

Affected Products : windows_server_2012 windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_23h2 windows_server_2022_23h2 +6 more products
Published: Feb. 10, 2026

Modified: Feb. 11, 2026

Vuln Type: Race Condition
8.8

HIGH

CVE-2025-30276

An out-of-bounds write vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to modify or corrupt memory. We have already fixed the vulnerability in the following versi...

Affected Products : qsync_central
Published: Feb. 11, 2026

Modified: Feb. 11, 2026

Vuln Type: Memory Corruption
7.8

HIGH

CVE-2026-21232

Untrusted pointer dereference in Windows HTTP.sys allows an authorized attacker to elevate privileges locally....

Affected Products : windows_11_23h2 windows_server_2022_23h2 windows_server_23h2 windows_11_24h2 windows_server_2025 windows_11_25h2 windows_11_26h1
Published: Feb. 10, 2026

Modified: Feb. 11, 2026

Vuln Type: Memory Corruption
8.1

HIGH

CVE-2025-30269

A use of externally-controlled format string vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to obtain secret data or modify memory. We have already fixed the vul...

Affected Products : qsync_central
Published: Feb. 11, 2026

Modified: Feb. 11, 2026

Vuln Type: Injection
7.0

HIGH

CVE-2026-21234

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally....

Affected Products : windows_server_2019 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_23h2 windows_server_2022_23h2 windows_server_23h2 windows_11_24h2 windows_server_2025 +2 more products
Published: Feb. 10, 2026

Modified: Feb. 11, 2026

Vuln Type: Race Condition
7.3

HIGH

CVE-2026-21235

Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally....

Affected Products : windows_server_2012 windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_23h2 windows_server_2012_r2 +1 more products
Published: Feb. 10, 2026

Modified: Feb. 11, 2026

Vuln Type: Memory Corruption
7.8

HIGH

CVE-2026-21236

Heap-based buffer overflow in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally....

Affected Products : windows_server_2012 windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_23h2 windows_server_2022_23h2 +6 more products
Published: Feb. 10, 2026

Modified: Feb. 11, 2026

Vuln Type: Memory Corruption
7.0

HIGH

CVE-2026-21237

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally....

Affected Products : windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_23h2 windows_server_2022_23h2 windows_server_23h2 windows_11_24h2 windows_server_2025 windows_11_25h2 windows_11_26h1
Published: Feb. 10, 2026

Modified: Feb. 11, 2026

Vuln Type: Race Condition
9.6

CRITICAL

CVE-2024-5386

In lunary-ai/lunary version 1.2.2, an account hijacking vulnerability exists due to a password reset token leak. A user with a 'viewer' role can exploit this vulnerability to hijack another user's account by obtaining the password reset token. The vulnera...

Affected Products : lunary
Published: Feb. 02, 2026

Modified: Feb. 11, 2026

Vuln Type: Authorization
7.8

HIGH

CVE-2026-21238

Improper access control in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally....

Affected Products : windows_server_2012 windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_23h2 windows_server_2022_23h2 +6 more products
Published: Feb. 10, 2026

Modified: Feb. 11, 2026

Vuln Type: Authorization
7.8

HIGH

CVE-2026-21239

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally....

Affected Products : windows_server_2012 windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_23h2 windows_server_2022_23h2 +5 more products
Published: Feb. 10, 2026

Modified: Feb. 11, 2026

Vuln Type: Memory Corruption
6.5

MEDIUM

CVE-2025-30266

A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in ...

Affected Products : qsync_central
Published: Feb. 11, 2026

Modified: Feb. 11, 2026

Vuln Type: Memory Corruption
7.8

HIGH

CVE-2026-21240

Time-of-check time-of-use (toctou) race condition in Windows HTTP.sys allows an authorized attacker to elevate privileges locally....

Affected Products : windows_server_2019 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_23h2 windows_server_2022_23h2 windows_server_23h2 windows_11_24h2 windows_server_2025 +2 more products
Published: Feb. 10, 2026

Modified: Feb. 11, 2026

Vuln Type: Race Condition
6.5

MEDIUM

CVE-2025-36009

IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow an authenticated user to cause a denial of service due to excessive use of a global variable....

Affected Products : db2
Published: Jan. 30, 2026

Modified: Feb. 11, 2026

Vuln Type: Denial of Service
7.0

HIGH

CVE-2026-21241

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally....

Affected Products : windows_server_2022 windows_11_23h2 windows_server_2022_23h2 windows_server_23h2 windows_11_24h2 windows_server_2025 windows_11_25h2 windows_11_26h1
Published: Feb. 10, 2026

Modified: Feb. 11, 2026

Vuln Type: Memory Corruption

Showing 20 of 5094 Results

Browse by Apps

Latest CVE Feed

9.8

8.7

5.1

8.8

7.5

7.8

8.8

7.8

8.1

7.0

7.3

7.8

7.0

9.6

7.8

7.8

6.5

7.8

6.5

7.0

CVEFeed.io UI Customizer

Layout

Vertical

Horizontal

Two Column

Color Scheme

Light

Dark

Layout Width

Fluid

Boxed

Layout Position

Topbar Color

Light

Dark

Sidebar Size

Default

Compact

Small (Icon View)

Small Hover View

Sidebar View

Default

Detached

Sidebar Color

Light

Dark

Gradient

Preloader

Enable

Disable