Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5Improper resolution of path equivalence in Windows MapUrlToZone allows an unauthorized attacker to bypass a security feature over a network.Check if you run itEPSS 1.26%Mar 10, 2026
- High7.8Out-of-bounds read in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.41%Mar 10, 2026
- High7.8Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege VulnerabilityCheck if you run itEPSS 0.38%Mar 10, 2026
- High7.0Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bluetooth RFCOM Protocol Driver allows an authorized attacker to…Check if you run itEPSS 0.22%Mar 10, 2026
- High8.8Use after free in RPC Runtime allows an authorized attacker to execute code over a network.Check if you run itEPSS 0.95%Mar 10, 2026
- High7.0Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Graphics Component allows an authorized attacker to elevate pr…Check if you run itEPSS 3.70%Mar 10, 2026
- High7.0Use after free in Broadcast DVR allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.31%Mar 10, 2026
- High7.8Heap-based buffer overflow in Azure Linux Virtual Machines allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.41%Mar 10, 2026
- High7.5Improper restriction of communication channel to intended endpoints in Azure IoT Explorer allows an unauthorized attacker to disclose information over a network.Check if you run itEPSS 1.04%Mar 10, 2026
- High7.5Missing authentication for critical function in Azure IoT Explorer allows an unauthorized attacker to disclose information over a network.Check if you run itEPSS 0.77%Mar 10, 2026
- High7.5Cleartext transmission of sensitive information in Azure IoT Explorer allows an unauthorized attacker to disclose information over a network.Check if you run itEPSS 0.75%Mar 10, 2026
- High7.8Improper access control in Azure Portal Windows Admin Center allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.32%Mar 10, 2026
- Medium5.9Insufficient verification of data authenticity in Windows App Installer allows an unauthorized attacker to perform spoofing over a network.Check if you run itEPSS 0.32%Mar 10, 2026
- High8.8Dependency on vulnerable third-party component in GitHub Repo: zero-shot-scfoundation allows an unauthorized attacker to execute code over a network.Check if you run itEPSS 0.97%Mar 10, 2026
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: tls: Fix race condition in tls_sw_cancel_work_tx() This issue was discovered during a code audit.Check if you run itEPSS 0.52%Mar 10, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: espintcp: Fix race condition in espintcp_close() This issue was discovered during a code audit.Check if you run itEPSS 0.12%Mar 10, 2026
- Low3.7An improper restriction of excessive authentication attempts vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4 all versions, FortiAnalyzer…Check if you run itEPSS 0.38%Mar 10, 2026
- Medium6.7An improper access control vulnerability in Fortinet FortiSwitchAXFixed 1.0.0 through 1.0.1 may allow an authenticated admin to execute system commands via a specifica…Check if you run itEPSS 0.15%Mar 10, 2026
- High8.8A buffer copy without checking size of input ('classic buffer overflow') vulnerability in Fortinet FortiSwitchAXFixed 1.0.0 through 1.0.1 may allow an unauthenticated…Check if you run itEPSS 0.30%Mar 10, 2026
- Medium6.1The encryption mechanism used in Eaton's EasySoft project file was insecure and susceptible to brute force attacks, an attacker with access to this file and the local…Check if you run itEPSS 0.08%Mar 10, 2026
- High7.2An authentication bypass using an alternate path or channel vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.3, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyz…Check if you run itEPSS 0.58%Mar 10, 2026
- Low3.3HCL Sametime for Android is impacted by a sensitive information disclosure.Check if you run itEPSS 0.14%Mar 10, 2026
- High8.8Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.Patch nowKEVEPSS 2.13%Mar 10, 2026
- High8.8Improper input validation in System Center Operations Manager allows an authorized attacker to elevate privileges over a network.Check if you run itEPSS 1.13%Mar 10, 2026
- High7.0CWE-502: Deserialization of untrusted data vulnerability exists that could lead to loss of confidentiality, integrity and potential remote code execution on workstatio…Check if you run itEPSS 0.33%Mar 10, 2026
Sort