Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownMicrosoft Windows Group Policy Elevation of Privilege VulnerabilityPatch nowKEVEPSS 6.40%Jul 30, 2026
- Critical9.8Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.Check if you run itEPSS 0.82%Jul 14, 2026
- High7.1Improper access control in Microsoft Windows DNS allows an authorized attacker to perform tampering locally.Check if you run itEPSS 0.30%Jul 14, 2026
- UnknownMicrosoft Windows Improper Link Resolution Before File Access ('Link Following')Patch nowKEVEPSS 0.37%Jul 10, 2026
- Critical9.2SQLite 'sqldiff.exe' does not securely handle the way the Microsoft Windows C runtime converts Unicode characters to ANSI codepages.Check if you run itEPSS 0.41%Jun 4, 2026
- Low2.0StrongDM Desktop Application before 23.74.0 (Desktop Client before 53.77.0) on Microsoft Windows stores authentication state, including a JSON Web Token and asymmetric…Check if you run itEPSS 0.13%May 29, 2026
- High7.3This vulnerability in Veeam Agent for Microsoft Windows allows for Local Privilege Escalation.Patch nowKEVEPSS 0.17%May 28, 2026
- Critical9.8Heap-based buffer overflow in Microsoft Windows DNS allows an unauthorized attacker to execute code over a network.Check if you run itEPSS 0.97%May 12, 2026
- High8.7Certain HP DeskJet All in One devices may be vulnerable to remote code execution caused by a buffer overflow when specially crafted Web Services for Devices (WSD) scan…Check if you run itEPSS 0.29%Apr 15, 2026
- High7.8Use after free in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.26%Apr 14, 2026
- High7.8Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.33%Apr 14, 2026
- Medium5.5Improper privilege management in Microsoft Windows allows an authorized attacker to deny service locally.Check if you run itEPSS 0.42%Apr 14, 2026
- Medium4.3Microsoft Windows Protection Mechanism Failure VulnerabilityPatch nowKEVEPSS 4.90%Apr 14, 2026
- UnknownCabal deletes project source files during configureOpen the advisoryApr 8, 2026
- UnknownMicrosoft Windows Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 95.99%Mar 23, 2026
- UnknownMicrosoft Windows External Control of File Name or PathPatch nowKEVEPSS 0.84%Feb 24, 2026
- High7.8Microsoft Windows Improper Privilege Management VulnerabilityPatch nowKEVEPSS 4.15%Feb 10, 2026
- Medium6.2Microsoft Windows NULL Pointer Dereference VulnerabilityPatch nowKEVEPSS 4.83%Feb 10, 2026
- High7.8Microsoft Windows Type Confusion VulnerabilityPatch nowKEVEPSS 2.48%Feb 10, 2026
- High8.8Microsoft Windows Shell Protection Mechanism Failure VulnerabilityPatch nowKEVEPSS 24.54%Feb 10, 2026
- Medium5.5Microsoft Windows Information Disclosure VulnerabilityPatch nowKEVEPSS 7.46%Jan 13, 2026
- High7.8Microsoft Windows Use After Free VulnerabilityPatch nowKEVEPSS 2.50%Dec 9, 2025
- High7.8Microsoft Windows Link Following VulnerabilityPatch nowKEVEPSS 4.61%Nov 11, 2025
- High7.0Microsoft Windows Race Condition VulnerabilityPatch nowKEVEPSS 4.46%Nov 11, 2025
- UnknownMicrosoft Windows User Interface (UI) Misrepresentation of Critical InformationPatch nowKEVEPSS 73.03%Oct 30, 2025