Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High7.3A vulnerability in B1 Free Archiver v1.5.86 allows files extracted from downloaded archives to bypass Windows Mark of the Web (MotW) protections.EPSS 0.3%Apr 29, 2026
- Medium6.8Netskope was notified about a potential gap in the Endpoint DLP Module for Netskope Client on Windows systems.Apr 29, 2026
- High7.7Ollama for Windows contains a Remote Code Execution vulnerability in its update mechanism due to improper handling of attacker‑controlled HTTP response headers.Apr 29, 2026
- High7.7Ollama for Windows does not perform integrity or authenticity verification of downloaded update executables.Apr 29, 2026
- Medium4.3Integer overflow in ANGLE in Google Chrome on Windows prior to 147.0.7727.138 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.Apr 28, 2026
- High7.3Insecure preserved inherited permissions vulnerability in Cerberus FTP Server on Windows allows Privilege Escalation.This issue has been resolved in Cerberus FTP Server: 2026.1Apr 27, 2026
- Medium4.3Xibo is an open source digital signage platform with a web content management system and Windows display player software.Apr 24, 2026
- Medium4.9Xibo is an open source digital signage platform with a web content management system and Windows display player software.Apr 24, 2026
- Medium5.4Xibo is an open source digital signage platform with a web content management system and Windows display player software.Apr 24, 2026
- High8.1Xibo is an open source digital signage platform with a web content management system and Windows display player software.Apr 24, 2026
- High8.3Race in GPU in Google Chrome on Windows prior to 147.0.7727.117 allowed a remote attacker to potentially perform a sandbox escape via a crafted video file.Apr 23, 2026
- High8.8The method "sock_recvfrom_into()" of "asyncio.ProacterEventLoop" (Windows only) was missing a boundary check for the data buffer when using nbytes parameter.Apr 21, 2026
- Low2.3Potential read out of bounds case with wolfSSHd on Windows while handling a terminal resize request.EPSS 0.2%Apr 20, 2026
- Medium6.7A vulnerability allowing a local attacker with administrator privileges to bypass Windows Driver Signature Enforcement.EPSS 0.2%Apr 17, 2026
- High8.5The Rapid7 Insight Agent (versions > 4.1.0.2) is vulnerable to a local privilege escalation attack that allows users to gain SYSTEM level control of a Windows host.Apr 17, 2026
- High7.4Git for Windows is the Windows port of Git.Apr 15, 2026
- High8.0Improper input validation in Windows Active Directory allows an authorized attacker to execute code over an adjacent network.Apr 14, 2026
- High7.8Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.Apr 14, 2026
- High7.0Use after free in Windows Server Update Service allows an authorized attacker to elevate privileges locally.Apr 14, 2026
- Medium6.8Heap-based buffer overflow in Windows USB Print Driver allows an unauthorized attacker to elevate privileges with a physical attack.Apr 14, 2026
- High7.8Untrusted pointer dereference in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally.Apr 14, 2026
- High8.4Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code locally.Apr 14, 2026
- Medium4.4Improper access control in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to bypass a security feature locally.Apr 14, 2026
- High7.0Double free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.Apr 14, 2026
- Medium5.5Null pointer dereference in Windows Redirected Drive Buffering allows an authorized attacker to deny service locally.Apr 14, 2026