Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.7Double free in Windows Rich Text Edit allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.34%May 12, 2026
- High7.5Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Native WiFi Miniport Driver allows an unauthorized attacker to e…Check if you run itEPSS 0.32%May 12, 2026
- Medium6.7Double free in Windows Rich Text Edit allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.32%May 12, 2026
- High8.5Improper input validation for some Intel(R) QAT software drivers for Windows before version 1.13 within Ring 3: User Applications may allow an escalation of privilege.Check if you run itEPSS 0.11%May 12, 2026
- High8.5Out-of-bounds write for some Intel(R) QAT software drivers for Windows before version 1.13 within Ring 3: User Applications may allow a escalation of privilege.Check if you run itEPSS 0.11%May 12, 2026
- Medium6.8Null pointer dereference for some Intel(R) QAT software drivers for Windows before version 2.6.0 within Ring 3: User Applications may allow a denial of service.Check if you run itEPSS 0.10%May 12, 2026
- Medium6.9Improper input validation for some Intel(R) QAT software drivers for Windows before version 2.6 within Ring 3: User Applications may allow a denial of service.Check if you run itEPSS 0.10%May 12, 2026
- Medium6.8Divide by zero for some Intel(R) QAT software drivers for Windows before version 1.13 within Ring 3: User Applications may allow a denial of service.Check if you run itEPSS 0.10%May 12, 2026
- Medium4.8Unchecked return value for some Intel(R) QAT software drivers for Windows before version 1.13 within Ring 3: User Applications may allow a denial of service.Check if you run itEPSS 0.10%May 12, 2026
- Medium6.9Buffer overflow for some Intel(R) QAT software drivers for Windows before version 1.13 within Ring 3: User Applications may allow a denial of service.Check if you run itEPSS 0.10%May 12, 2026
- Medium6.9Null pointer dereference for some Intel(R) QAT software drivers for Windows before version 1.13 within Ring 3: User Applications may allow a denial of service.Check if you run itEPSS 0.10%May 12, 2026
- Medium6.9Improper input validation for some Intel(R) QAT software drivers for Windows before version 1.13 within Ring 3: User Applications may allow a denial of service.Check if you run itEPSS 0.10%May 12, 2026
- Medium6.8Improper buffer restrictions for some Display Virtualization for Windows OS driver software within Ring 2: Device Drivers may allow a denial of service.Check if you run itEPSS 0.10%May 12, 2026
- High8.5A vulnerability chain in Cribl Edge for Windows before 4.17.1 allows a local authenticated user to escalate privileges to NT AUTHORITY\SYSTEM.Check if you run itEPSS 0.40%May 12, 2026
- High7.5In Meari IoT Cloud alert image storage on Alibaba OSS (latest observed; storage service version not disclosed), motion snapshots are retrievable without authentication…Check if you run itEPSS 0.50%May 11, 2026
- High7.4Akamai Guardicore Platform Agent (GPA) and Zero Trust Client on Linux and macOS allow TOCTOU-based local privilege escalation.Check if you run itEPSS 0.44%May 8, 2026
- High8.5PredatorSense version 3.00.3136 to 3.00.3196 contain Local Privilege Escalation (LPE) vulnerability.The program exposes a Windows Named Pipe that uses a custom protoco…Check if you run itEPSS 0.17%May 8, 2026
- High7.8NAVER MYBOX Explorer for Windows before 3.0.11.160 allows a local attacker to escalate privileges to NT AUTHORITY\SYSTEM via registry manipulation due to improper privilege checks.Check if you run itEPSS 0.14%May 8, 2026
- Critical9.3Daemon Tools Lite Embedded Malicious Code VulnerabilityPatch nowKEVEPSS 0.96%May 8, 2026
- High7.5The Dial and LookupPort functions panic on Windows when provided with an input containing a NUL (0).Check if you run itEPSS 0.62%May 7, 2026
- High8.8Insufficient validation of untrusted input in ChromeDriver in Google Chrome on Windows prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code via a…Check if you run itEPSS 0.41%May 6, 2026
- High7.8Inappropriate implementation in Chromoting in Google Chrome on Windows prior to 148.0.7778.96 allowed a local attacker to perform OS-level privilege escalation via a m…Check if you run itEPSS 0.10%May 6, 2026
- High7.8Insufficient validation of untrusted input in Updater in Google Chrome on Windows prior to 148.0.7778.96 allowed a local attacker to perform OS-level privilege escalat…Check if you run itEPSS 0.10%May 6, 2026
- High8.8Integer overflow in Dawn in Google Chrome on Windows prior to 148.0.7778.96 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.Check if you run itEPSS 0.31%May 6, 2026
- High7.5Race in Chromoting in Google Chrome on Windows prior to 148.0.7778.96 allowed a local attacker to perform privilege escalation via a malicious file.Check if you run itEPSS 0.18%May 6, 2026