Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.0Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.28%Mar 10, 2026
- Medium5.5Divide by zero in Microsoft Graphics Component allows an unauthorized attacker to deny service locally.Check if you run itEPSS 0.48%Mar 10, 2026
- Medium5.5Null pointer dereference in Microsoft Graphics Component allows an unauthorized attacker to deny service locally.Check if you run itEPSS 0.49%Mar 10, 2026
- High7.4Use after free in Microsoft Brokering File System allows an unauthorized attacker to elevate privileges locally.Check if you run itEPSS 0.31%Mar 10, 2026
- High7.8Deserialization of untrusted data in Windows System Image Manager allows an authorized attacker to execute code locally.Check if you run itEPSS 1.69%Mar 10, 2026
- High7.8Null pointer dereference in Windows Performance Counters allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.41%Mar 10, 2026
- Medium6.5A NULL Pointer Dereference vulnerability [CWE-476] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4 all versions, For…Check if you run itEPSS 0.41%Mar 10, 2026
- Medium6.6A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4 all versions,…Check if you run itEPSS 0.67%Mar 10, 2026
- Medium4.8Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kerberos allows an unauthorized attacker to bypass a security fe…Check if you run itEPSS 0.37%Mar 10, 2026
- High7.0Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Device Association Service allows an authorized attacker to elev…Check if you run itEPSS 0.22%Mar 10, 2026
- High7.0Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Device Association Service allows an authorized attacker to elev…Check if you run itEPSS 0.22%Mar 10, 2026
- High7.8Improper authentication in Windows SMB Server allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 4.85%Mar 10, 2026
- High7.8Null pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.54%Mar 10, 2026
- High7.8Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.36%Mar 10, 2026
- High7.8Incorrect permission assignment for critical resource in Windows Accessibility Infrastructure (ATBroker.exe) allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 3.30%Mar 10, 2026
- High7.8Improper access control in Windows Projected File System allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.35%Mar 10, 2026
- High7.8Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 4.59%Mar 10, 2026
- Medium6.8Heap-based buffer overflow in Windows Mobile Broadband allows an unauthorized attacker to execute code with a physical attack.Check if you run itEPSS 0.46%Mar 10, 2026
- High7.8External control of file name or path in Windows Kernel allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.34%Mar 10, 2026
- High7.0Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.48%Mar 10, 2026
- High8.8Heap-based buffer overflow in Windows File Server allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.41%Mar 10, 2026
- Medium5.5Out-of-bounds read in Push Message Routing Service allows an authorized attacker to disclose information locally.Check if you run itEPSS 0.45%Mar 10, 2026
- High7.8A UNIX symbolic link (Symlink) following vulnerability in Fortinet FortiClientLinux 7.4.0 through 7.4.4, FortiClientLinux 7.2.2 through 7.2.12 may allow a local and un…Check if you run itEPSS 0.24%Mar 10, 2026
- High8.1An Improper Control of Interaction Frequency vulnerability [CWE-799] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.5, FortiWeb 7.4…Check if you run itEPSS 0.81%Mar 10, 2026
- Medium5.3This issue affects the ExtractEmbeddedFiles example in Apache PDFBox: from 2.0.24 through 2.0.35, from 3.0.0 through 3.0.6.Check if you run itEPSS 0.90%Mar 10, 2026
Sort