Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.1ZDI-26-622: Microsoft Windows IKEv2 AES-GCM Decryption Integer Underflow Remote Code Execution VulnerabilityCheck if you run itEPSS 1.17%Sep 8, 2026
- High8.8Google Chromium V8 Out of Bounds Write VulnerabilityPatch nowKEVEPSS 3.14%Sep 8, 2026
- High7.8Microsoft Windows Heap-Based Buffer Overflow VulnerabilityPatch nowKEVEPSS 3.62%Sep 8, 2026
- High7.8Microsoft Windows Link Following VulnerabilityPatch nowKEVEPSS 0.39%Sep 8, 2026
- Critical10.0Authorization bypass through user-controlled key in Microsoft Azure Active Directory B2C allows an unauthorized attacker to elevate privileges over a network.Check if you run itEPSS 0.80%Sep 3, 2026
- Critical10.0Missing authentication for critical function in Azure AI Language allows an unauthorized attacker to elevate privileges over a network.Check if you run itEPSS 0.90%Sep 3, 2026
- High7.4Improper neutralization of special elements in data query logic in Microsoft Discovery Studio allows an unauthorized attacker to disclose information over a network.Check if you run itEPSS 0.92%Sep 3, 2026
- High8.8Google Chromium V8 Type Confusion VulnerabilityPatch nowKEVEPSS 48.88%Sep 3, 2026
- UnknownRapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)Patch nowKEVEPSS 0.96%Aug 24, 2026
- High7.6ZDI-26-607: Microsoft Office HTML Injection Information Disclosure VulnerabilityOpen the advisoryAug 24, 2026
- High7.0ZDI-26-606: Microsoft Windows Compatibility Appraiser Link Following Local Privilege Escalation VulnerabilityOpen the advisoryAug 24, 2026
- Low3.3ZDI-26-605: Microsoft Windows Localized Filenames Improper Input Validation NTLM Response Information Disclosure VulnerabilityCheck if you run itEPSS 0.92%Aug 24, 2026
- Medium4.1Unleash is an open-source feature management platform.Check if you run itEPSS 0.32%Aug 21, 2026
- Medium5.5Unleash is an open-source feature management platform.Check if you run itEPSS 0.39%Aug 21, 2026
- Critical10.0Server-side request forgery (ssrf) in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network.Check if you run itEPSS 0.80%Aug 21, 2026
- UnknownImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.74%Aug 13, 2026
- High7.8Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.Check if you run itEPSS 0.47%Aug 11, 2026
- High7.8Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.Check if you run itEPSS 0.47%Aug 11, 2026
- High8.0Authentication bypass by capture-replay in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.Check if you run itEPSS 0.69%Aug 11, 2026
- High8.8Stack-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.Check if you run itEPSS 0.82%Aug 11, 2026
- Medium6.7Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.35%Aug 11, 2026
- High7.8ZDI-26-621: Microsoft Windows UMPDDrvRealizeBrush Improper Object Management Local Privilege Escalation VulnerabilityCheck if you run itEPSS 0.33%Aug 11, 2026
- High8.8Microsoft SharePoint Code Injection VulnerabilityPatch nowKEVEPSS 2.10%Aug 11, 2026
- High7.0Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free VulnerabilityPatch nowKEVEPSS 0.33%Aug 11, 2026
- UnknownWeaver e-cology Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.62%Aug 11, 2026