Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- UnknownMicrosoft Security Advisory CVE-2026-102870 - ASP.NET Core Remote Code Execution VulnerabilityEPSS 0.8%Oct 13, 2026
- High8.5Server-side request forgery in Progress MarkLogic Server Azure deploymentsOct 12, 2026
- High7.3Improper access control in Samsung Continuity Service for windows prior to version 4.6.1217.0 allows adjacent attackers to manipulate the connected mobile device.EPSS 0.1%Oct 12, 2026
- Medium5.3Furion .NET Framework StringRenderExtensions.cs String.Replace sql injectionEPSS 0.3%Oct 11, 2026
- Critical10.0Improper certificate validation in Microsoft Partner Center allows an unauthorized attacker to elevate privileges over a network.Oct 8, 2026
- Critical9.8Deserialization of untrusted data in Microsoft Dataverse allows an unauthorized attacker to execute code over a network.Oct 8, 2026
- Medium6.5Missing authorization in Azure Event Grid allows an authorized attacker to perform spoofing over a network.Oct 8, 2026
- High8.1Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network.Oct 8, 2026
- UnknownRoot.Mkdir(All) can follow junctions out of the root on Windows in osOct 8, 2026
- Critical9.8IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to a buffer overrun in the TDS (Microsoft SQL Server) PRELOGIN packet decoder.EPSS 0.4%Oct 8, 2026
- High8.7Exposure of sensitive information to an unauthorized actor in Azure API Center allows an unauthorized attacker to disclose information over a network.EPSS 0.4%Oct 8, 2026
- UnknownCVE-2026-91799 is listed by Microsoft, Adobe, Apple, and Foxit vulnerabilities.Oct 7, 2026
- UnknownCVE-2026-80093 is listed by Microsoft, Adobe, Apple, and Foxit vulnerabilities.Oct 7, 2026
- UnknownCVE-2026-58613 is listed by Microsoft, Adobe, Apple, and Foxit vulnerabilities.Oct 7, 2026
- UnknownCVE-2026-50475 is listed by Microsoft, Adobe, Apple, and Foxit vulnerabilities.Oct 7, 2026
- UnknownCVE-2026-49177 is listed by Microsoft, Adobe, Apple, and Foxit vulnerabilities.Oct 7, 2026
- UnknownCVE-2026-48388 is listed by Microsoft, Adobe, Apple, and Foxit vulnerabilities.Oct 7, 2026
- Medium4.6Missing authorization in CredentialProvider in Google Chrome on on Windows prior to 155.0.8059.39 allowed a local attacker to obtain sensitive information via physical access.EPSS 0.1%Oct 6, 2026
- High7.0Out of Bound Write on WibuKey for WindowsEPSS 0.1%Oct 6, 2026
- Unknownuv: Path traversal on Windows through wheel extractionEPSS 0.4%Oct 5, 2026
- High8.8Weak authentication in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.EPSS 0.5%Oct 2, 2026
- High8.8ZDI-26-751: Microsoft Windows dxgkrnl Time-Of-Check Time-Of-Use Local Privilege Escalation VulnerabilityEPSS 0.3%Oct 1, 2026
- Low3.3ZDI-26-725: Foxit PDF Reader Doc Object Use-After-Free Information Disclosure VulnerabilityEPSS 0.2%Sep 23, 2026
- High8.6Microsoft 365 Copilot Business Chat Information Disclosure VulnerabilityEPSS 0.5%Sep 17, 2026
- Medium6.1Ai command injection in Microsoft Copilot allows an unauthorized attacker to disclose information over a network.EPSS 0.4%Sep 17, 2026