Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.0Time-of-check time-of-use (toctou) race condition in Microsoft Defender for Linux allows an authorized attacker to deny service locally.Check if you run itEPSS 0.21%Oct 14, 2025
- High7.0Double free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.24%Oct 14, 2025
- High7.8Improper validation of specified type of input in Windows Authentication Methods allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.27%Oct 14, 2025
- High7.8Improper validation of specified type of input in Windows Authentication Methods allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.27%Oct 14, 2025
- High7.0Time-of-check time-of-use (toctou) race condition in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.19%Oct 14, 2025
- Medium4.9Arbitrary file download vulnerabilities exist in a low-level interface library in AOS-10 GW and AOS-8 Controller/Mobility Conductor operating systems.Check if you run itEPSS 0.45%Oct 14, 2025
- Medium5.5Exposure of sensitive information to an unauthorized actor in Microsoft Failover Cluster Virtual Driver allows an authorized attacker to disclose information locally.Check if you run itEPSS 0.40%Oct 14, 2025
- Medium5.5Improper access control in Microsoft Windows Search Component allows an authorized attacker to deny service locally.Check if you run itEPSS 0.34%Oct 14, 2025
- High7.5Improper input validation in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.Check if you run itEPSS 1.02%Oct 14, 2025
- Medium6.5External control of file name or path in Windows Core Shell allows an unauthorized attacker to perform spoofing over a network.Check if you run itEPSS 0.82%Oct 14, 2025
- High7.1Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.Check if you run itEPSS 0.48%Oct 14, 2025
- Medium5.5Uncaught exception in Microsoft Office allows an unauthorized attacker to deny service locally.Check if you run itEPSS 0.42%Oct 14, 2025
- High7.8Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.Check if you run itEPSS 0.38%Oct 14, 2025
- Medium6.5Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to perform spoofing over a network.Check if you run itEPSS 1.86%Oct 14, 2025
- High7.4Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege VulnerabilityCheck if you run itEPSS 0.29%Oct 14, 2025
- Medium5.5Exposure of sensitive information to an unauthorized actor in Windows Push Notification Core allows an authorized attacker to disclose information locally.Check if you run itEPSS 0.47%Oct 14, 2025
- High7.1Out-of-bounds read in Windows MapUrlToZone allows an unauthorized attacker to disclose information over a network.Check if you run itEPSS 0.50%Oct 14, 2025
- High7.0Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Graphics Component allows an authorized attacker to elevate privileges locaCheck if you run itEPSS 0.20%Oct 14, 2025
- Medium5.5Insertion of sensitive information into log file in Windows StateRepository API allows an authorized attacker to disclose information locally.Check if you run itEPSS 0.45%Oct 14, 2025
- Medium5.0Improper input validation in Microsoft Windows Search Component allows an authorized attacker to deny service locally.Check if you run itEPSS 0.47%Oct 14, 2025
- Medium5.5Insertion of sensitive information into log file in Windows ETL Channel allows an authorized attacker to disclose information locally.Check if you run itEPSS 0.45%Oct 14, 2025
- High7.0Use of uninitialized resource in Windows Kernel allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 2.65%Oct 14, 2025
- High7.8Heap-based buffer overflow in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.32%Oct 14, 2025
- Medium5.5Improper input validation in Microsoft Windows Search Component allows an unauthorized attacker to deny service locally.Check if you run itEPSS 0.50%Oct 14, 2025
- High7.4Use after free in Microsoft Brokering File System allows an unauthorized attacker to elevate privileges locally.Check if you run itEPSS 0.26%Oct 14, 2025
Sort