Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8Microsoft Security Advisory CVE-2026-105016 - Microsoft QUIC Remote Code Execution VulnerabilityCheck if you run itEPSS 0.99%Oct 13, 2026
- Critical9.1NetEase Cloud Music client for Windows (cloudmusic.exe) versions 3.1.38 and 3.1.39.205426 contains a TLS certificate validation vulnerability that allows a network-adj…Check if you run itEPSS 0.15%Oct 12, 2026
- High7.8Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in Ministry of Justice General Directorate of Information Tech…Check if you run itEPSS 0.49%Oct 12, 2026
- High8.8Deserialization of untrusted data vulnerability in Ministry of Justice General Directorate of Information Technology UYAP Document Editor on Windows and Linux and Mini…Check if you run itEPSS 0.25%Oct 12, 2026
- High7.3Improper access control in Samsung Continuity Service for windows prior to version 4.6.1217.0 allows adjacent attackers to manipulate the connected mobile device.Check if you run itEPSS 0.12%Oct 12, 2026
- High7.3ImageMagick on Windows through 7.1.2-33 and 6.9.13-58 contains an uncontrolled search path vulnerability in NTGhostscriptEXE() that launches gswin64c.exe by bare name…Check if you run itEPSS 0.13%Oct 11, 2026
- UnknownMalicious code in agent-vx (PyPI)Open the advisoryOct 10, 2026
- UnknownMalicious code in media-manager5 (PyPI)Open the advisoryOct 10, 2026
- UnknownMalicious code in passwordcracker (npm)Open the advisoryOct 10, 2026
- UnknownMalicious code in passwordcrackv2 (npm)Open the advisoryOct 9, 2026
- UnknownSecurity update for unboundOpen the advisoryOct 9, 2026
- UnknownSecurity update for google-osconfig-agentOpen the advisoryOct 9, 2026
- UnknownRoot.Mkdir(All) can follow junctions out of the root on Windows in osCheck if you run itEPSS 0.49%Oct 8, 2026
- Medium4.6Missing authorization in CredentialProvider in Google Chrome on on Windows prior to 155.0.8059.39 allowed a local attacker to obtain sensitive information via physical access.Check if you run itEPSS 0.10%Oct 6, 2026
- Medium5.3Missing authorization in Media in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to obtain sensi…Check if you run itEPSS 0.27%Oct 6, 2026
- High7.0Out of Bound Write on WibuKey for WindowsCheck if you run itEPSS 0.10%Oct 6, 2026
- Unknownuv: Path traversal on Windows through wheel extractionCheck if you run itEPSS 0.43%Oct 5, 2026
- High8.4Out-of-bounds Write (CWE-787) in the PEA archive extraction routine (pea.pas, unpea_procedure) of the first-party pea component in PeaZip 11.2.0 and earlier allows an…Check if you run itEPSS 0.13%Oct 1, 2026
- High8.8ZDI-26-751: Microsoft Windows dxgkrnl Time-Of-Check Time-Of-Use Local Privilege Escalation VulnerabilityCheck if you run itEPSS 0.29%Oct 1, 2026
- Unknownpalletsprojects werkzeug Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.78%Sep 30, 2026
- Medium6.1Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS.Check if you run itEPSS 0.24%Sep 29, 2026
- UnknownMalicious code in gemini-computer-use (npm)Open the advisorySep 21, 2026
- Medium5.3ZDI-26-708: (0Day) Microsoft Windows HTTP Proxy Privilege Escalation VulnerabilityOpen the advisorySep 16, 2026
- UnknownSubpath symlinking on Windows nodes permits NTLM coercionOpen the advisorySep 14, 2026
- Medium6.8gitoxide is an implementation of git written in Rust.Check if you run itEPSS 0.19%Sep 14, 2026