Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.39%Jan 13, 2026
- High7.8Heap-based buffer overflow in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.55%Jan 13, 2026
- High7.8Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 8.28%Jan 13, 2026
- High7.8Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.48%Jan 13, 2026
- High7.8Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.29%Jan 13, 2026
- High7.8Untrusted pointer dereference in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.48%Jan 13, 2026
- High8.1Improper input validation in Windows Server Update Service allows an unauthorized attacker to execute code over a network.Check if you run itEPSS 1.12%Jan 13, 2026
- High7.7Incorrect privilege assignment in Windows Hello allows an unauthorized attacker to perform tampering locally.Check if you run itEPSS 0.50%Jan 13, 2026
- High7.5A vulnerability affecting HPE Networking Instant On Access Points has been identified where a device processing a specially crafted packet could enter a non-responsive state, in soCheck if you run itEPSS 0.47%Jan 13, 2026
- High7.5A vulnerability in the router mode configuration of HPE Instant On Access Points exposed certain network configuration details to unintended interfaces.Check if you run itEPSS 0.41%Jan 13, 2026
- High7.8Software installed and run as a non-privileged user may conduct improper GPU system calls to cause mismanagement of reference counting to cause a potential use after free.Check if you run itEPSS 0.13%Jan 13, 2026
- High8.8Software installed and run as a non-privileged user may conduct improper GPU system calls to cause mismanagement of resources reference counting creating a potential use after freeCheck if you run itEPSS 0.17%Jan 13, 2026
- Low3.5Software installed and run as a non-privileged user may conduct improper GPU system calls to subvert GPU HW to write to arbitrary physical memory pages.Check if you run itEPSS 0.15%Jan 13, 2026
- Medium5.3Pega Customer Service Framework versions 8.7.0 through 25.1.0 are affected by a Unrestricted file upload vulnerability, where a privileged user could potentially upload a maliciousCheck if you run itEPSS 0.27%Jan 13, 2026
- High7.5Dell SupportAssist OS Recovery, versions prior to 5.5.15.1, contain a Creation of Temporary File With Insecure Permissions vulnerability.Check if you run itEPSS 0.11%Jan 13, 2026
- Medium6.2Null pointer dereference in the MsgRegisterEvent() system call could allow an attacker with local access and code execution abilities to crash the QNX Neutrino kernel.Check if you run itEPSS 0.14%Jan 13, 2026
- Low3.4A Server-Side Request Forgery (SSRF) vulnerability [CWE-918] vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.4, FortiSandbox 4.4 all versions, FortiSandbox 4.2 all versionCheck if you run itEPSS 0.42%Jan 13, 2026
- Medium5.7An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiVoice 7.2.0 through 7.2.2, FortiVoice 7.0.0 through 7.0.7 allows aCheck if you run itEPSS 0.67%Jan 13, 2026
- Critical9.3An exposure of sensitive information to an unauthorized actor [CWE-200] vulnerability in Fortinet FortiFone 7.0.0 through 7.0.1, FortiFone 3.0.13 through 3.0.23 allows an unauthentCheck if you run itEPSS 0.94%Jan 13, 2026
- Critical9.8Fortinet FortiSIEM Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 43.87%Jan 13, 2026
- Medium6.8An improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiClientEMS 7.4.3 through 7.4.4, FortiClCheck if you run itEPSS 7.76%Jan 13, 2026
- Critical9.1Intermediate register values of secure workloads can be exfiltrated in workloads scheduled from applications running in the non-secure environment of a platform.Check if you run itEPSS 0.36%Jan 13, 2026
- Medium6.6Dell SupportAssist OS Recovery, versions prior to 5.5.15.1, contain a Creation of Temporary File With Insecure Permissions vulnerability.Check if you run itEPSS 0.11%Jan 13, 2026
- Medium4.8An insufficient input validation vulnerability in NETGEAR Orbi devices' DHCPv6 functionality allows network adjacent attackers authenticated over WiFi or on LAN to execute OS commaCheck if you run itEPSS 1.06%Jan 13, 2026
- Medium6.1A path traversal vulnerability in NETGEAR WiFi range extenders allows an attacker with LAN authentication to access the router's IP and review the contents of the dynamically generCheck if you run itEPSS 0.25%Jan 13, 2026
Sort