Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result
Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result
Substance3D - Painter versions 10.1.0 and earlier are affected by a Double Free vulnerability that could result in arbit
Potential vulnerabilities have been identified in the audio package for certain HP PC products using the Sound Research
Authenticated user can access unintended user capabilities in NetScaler ADC and NetScaler Gateway if the appliance must
Memory safety vulnerability leading to memory corruption and Denial of Service in NetScaler ADC and Gateway if the appli
A vulnerability in Brocade Fabric OS versions before 9.2.2 could allow man-in-the-middle attackers to conduct remote Ser
A code injection vulnerability in the SecuSUITE Server Web Administration Portal of SecuSUITE versions 5.0.420 and earli
Azure Database for PostgreSQL Flexible Server Extension Elevation of Privilege Vulnerability
Illustrator versions 28.7.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitr
Illustrator versions 28.7.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitr
Illustrator versions 28.7.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in
After Effects versions 23.6.9, 24.6.2 and earlier are affected by an out-of-bounds write vulnerability that could result
After Effects versions 23.6.9, 24.6.2 and earlier are affected by an out-of-bounds write vulnerability that could result
After Effects versions 23.6.9, 24.6.2 and earlier are affected by an out-of-bounds write vulnerability that could result
Illustrator versions 28.7.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitr
Azure Database for PostgreSQL Flexible Server Extension Elevation of Privilege Vulnerability
An improper verification of cryptographic signature vulnerability [CWE-347] in FortiClient MacOS version 7.4.0, version
A privilege context switching error vulnerability [CWE-270] in FortiClient Windows version 7.2.4 and below, version 7.0.
A untrusted search path in Fortinet FortiClientWindows versions 7.4.0, versions 7.2.4 through 7.2.0, versions 7.0.12 thr
A client-side enforcement of server-side security in Fortinet FortiAnalyzer-BigData at least version 7.4.0 and 7.2.0 t
Limited remote code execution with privilege of a NetworkService Account access in Citrix Session Recording if the attac
Privilege escalation to NetworkService Account access in Citrix Session Recording when an attacker is an authenticated u
Authentication bypass by assumed-immutable data on airlift.microsoft.com allows an authorized attacker to elevate privil
Microsoft PC Manager Elevation of Privilege Vulnerability
Visual Studio Code Python Extension Remote Code Execution Vulnerability
Visual Studio Code Remote Extension Elevation of Privilege Vulnerability
TorchGeo Remote Code Execution Vulnerability
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
Microsoft.SqlServer.XEvent.Configuration.dll Remote Code Execution Vulnerability
Microsoft Exchange Server Spoofing Vulnerability
Windows Task Scheduler Elevation of Privilege Vulnerability
Microsoft Word Security Feature Bypass Vulnerability
Microsoft Office Graphics Remote Code Execution Vulnerability
Microsoft Office Graphics Remote Code Execution Vulnerability
Microsoft Excel Remote Code Execution Vulnerability
Microsoft Excel Remote Code Execution Vulnerability
Microsoft Excel Remote Code Execution Vulnerability
Microsoft Excel Remote Code Execution Vulnerability
Microsoft Excel Remote Code Execution Vulnerability
Microsoft SQL Server Remote Code Execution Vulnerability
Active Directory Certificate Services Elevation of Privilege Vulnerability
SQL Server Native Client Remote Code Execution Vulnerability
SQL Server Native Client Remote Code Execution Vulnerability
SQL Server Native Client Remote Code Execution Vulnerability
SQL Server Native Client Remote Code Execution Vulnerability
SQL Server Native Client Remote Code Execution Vulnerability
SQL Server Native Client Remote Code Execution Vulnerability
SQL Server Native Client Remote Code Execution Vulnerability
SQL Server Native Client Remote Code Execution Vulnerability
Frequently Asked Questions
What does HIGH severity mean for CVEs?
CVSS 7.0–8.9 — serious vulnerabilities that can lead to significant data exposure, privilege escalation, or service disruption
How many high severity CVEs exist?
There are 149,356 CVE records rated HIGH in our database. Of these, 381 are listed in CISA's Known Exploited Vulnerabilities catalog.
How should I prioritize high severity vulnerabilities?
HIGH severity vulnerabilities should be patched immediately, especially if they are in the CISA KEV catalog or have a high EPSS score. Use CyberStrike to automatically detect and prioritize these vulnerabilities across your infrastructure.
Detect HIGH Vulnerabilities
CyberStrike scans your infrastructure and detects high severity vulnerabilities in real time.
Get Started