Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.0Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.33%Dec 9, 2025
- High7.8Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.Check if you run itEPSS 0.52%Dec 9, 2025
- High7.8Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.Check if you run itEPSS 0.43%Dec 9, 2025
- High7.8Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.Check if you run itEPSS 0.56%Dec 9, 2025
- High7.8Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.Check if you run itEPSS 0.66%Dec 9, 2025
- High8.8Out-of-bounds write in Azure Monitor Agent allows an authorized attacker to execute code over a network.Check if you run itEPSS 0.74%Dec 9, 2025
- High8.5MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution.Check if you run itEPSS 0.19%Dec 9, 2025
- Medium5.3MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the Added parameter of /Mondo/lang/sys/Forms/MAI/AddRecipientsResult.aspx.Check if you run itEPSS 0.49%Dec 9, 2025
- Medium5.3MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the AddressesBcc parameter of /Mondo/lang/sys/Forms/AddressBook.aspx.Check if you run itEPSS 0.40%Dec 9, 2025
- Medium5.3MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the AddressesCc parameter of /Mondo/lang/sys/Forms/AddressBook.aspx.Check if you run itEPSS 0.40%Dec 9, 2025
- Medium5.3MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the AddressesTo parameter of /Mondo/lang/sys/Forms/AddressBook.aspx.Check if you run itEPSS 0.40%Dec 9, 2025
- Medium5.3MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the Failed parameter of /Mondo/lang/sys/Forms/MAI/AddRecipientsResult.aspx.Check if you run itEPSS 0.49%Dec 9, 2025
- Medium5.3MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the FieldBcc parameter of /Mondo/lang/sys/Forms/AddressBook.aspx.Check if you run itEPSS 0.40%Dec 9, 2025
- Medium5.3MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the FieldCc parameter of /Mondo/lang/sys/Forms/AddressBook.aspx.Check if you run itEPSS 0.40%Dec 9, 2025
- Medium5.3MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the FieldTo parameter of /Mondo/lang/sys/Forms/AddressBook.aspx.Check if you run itEPSS 0.40%Dec 9, 2025
- Medium5.3MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the Id parameter of /Mobile/ContactDetails.aspx.Check if you run itEPSS 0.40%Dec 9, 2025
- Medium5.3MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the InstanceScope parameter of /Mondo/lang/sys/Forms/CAL/compose.aspx.Check if you run itEPSS 0.40%Dec 9, 2025
- Medium5.3MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the Message parameter of /Mobile/Compose.aspx.Check if you run itEPSS 0.40%Dec 9, 2025
- Medium5.3MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the theme parameter of /Mondo/lang/sys/Forms/Statistics.aspx.Check if you run itEPSS 0.49%Dec 9, 2025
- High7.5Improper input validation in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.Check if you run itEPSS 1.02%Dec 9, 2025
- Medium5.3User interface (ui) misrepresentation of critical information in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.Check if you run itEPSS 0.80%Dec 9, 2025
- High7.8Out-of-bounds read in Application Information Services allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.40%Dec 9, 2025
- High7.8Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.Check if you run itEPSS 0.52%Dec 9, 2025
- High7.8Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.Check if you run itEPSS 0.61%Dec 9, 2025
- High7.8Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.Check if you run itEPSS 0.52%Dec 9, 2025
Sort