Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authorized attac…Check if you run itEPSS 0.20%Apr 14, 2026
- High7.8Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate priv…Check if you run itEPSS 0.18%Apr 14, 2026
- High7.0Use after free in Windows Shell allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.26%Apr 14, 2026
- High7.8Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.Check if you run itEPSS 0.41%Apr 14, 2026
- High7.8InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user.Check if you run itEPSS 0.38%Apr 14, 2026
- High7.0Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.20%Apr 14, 2026
- High7.0Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.26%Apr 14, 2026
- High7.0Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.26%Apr 14, 2026
- High7.8Use after free in Windows Container Isolation FS Filter Driver allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.33%Apr 14, 2026
- Medium5.5ImageMagick is free and open-source software used for editing and manipulating digital images.Check if you run itEPSS 0.18%Apr 13, 2026
- Critical9.1Use-after-free (UAF) was possible in the , , and when a memory allocation fails with a and the decompression instance is re-used.Check if you run itEPSS 0.76%Apr 13, 2026
- High8.4Nitro PDF Pro for Windows 14.41.1.4 contains a heap use-after-free vulnerability in the implementation of the JavaScript method this.mailDoc().Check if you run itEPSS 0.20%Apr 13, 2026
- High7.0In the Linux kernel, the following vulnerability has been resolved: ACPI: EC: clean up handlers on probe failure in acpi_ec_setup() When ec_install_handlers() returns…Check if you run itEPSS 0.15%Apr 13, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: net: bonding: fix use-after-free in bond_xmit_broadcast() bond_xmit_broadcast() reuses the original…Check if you run itEPSS 0.18%Apr 13, 2026
- High7.1UAF vulnerability in the kernel module.Check if you run itEPSS 0.11%Apr 13, 2026
- High7.1UAF vulnerability in the kernel module.Check if you run itEPSS 0.10%Apr 13, 2026
- Critical9.6NASM contains a heap use after free vulnerability in response file (-@) processing where a dangling pointer to freed memory is stored in the global depend_file and lat…Check if you run itEPSS 0.48%Apr 10, 2026
- Medium6.3A heap use-after-free exists in wolfSSL's TLS 1.3 post-quantum cryptography (PQC) hybrid KeyShare processing.Check if you run itEPSS 0.34%Apr 10, 2026
- High7.8HDF5 is software for managing data.Check if you run itEPSS 0.19%Apr 9, 2026
- Low1.0Wasmtime is a runtime for WebAssembly.Check if you run itEPSS 0.12%Apr 9, 2026
- Medium4.4LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files.Check if you run itEPSS 0.16%Apr 9, 2026
- High8.8Use after free in Media in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.Check if you run itEPSS 0.39%Apr 8, 2026
- High8.8Use after free in Navigation in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.Check if you run itEPSS 0.41%Apr 8, 2026
- Critical9.6Use after free in PrivateAI in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially per…Check if you run itEPSS 0.34%Apr 8, 2026
- High8.8Use after free in Blink in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.Check if you run itEPSS 0.41%Apr 8, 2026