Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- UnknownCVE-2026-100202 is listed by NCSC-2026-0423 [1.00] [M/H] Kwetsbaarheden verholpen in Microsoft Windows.Oct 13, 2026
- High7.8Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.Oct 13, 2026
- High7.0Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.Oct 13, 2026
- High8.1Improper verification of cryptographic signature in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network.EPSS 0.5%Oct 13, 2026
- Medium6.5Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.EPSS 0.8%Oct 13, 2026
- Medium4.6Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a networkEPSS 0.4%Oct 13, 2026
- High8.8Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.EPSS 0.9%Oct 13, 2026
- High8.8Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.EPSS 0.7%Oct 13, 2026
- High8.8Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.EPSS 0.7%Oct 13, 2026
- High8.8Improper access control in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.EPSS 0.7%Oct 13, 2026
- Medium4.6Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a networkEPSS 0.4%Oct 13, 2026
- Medium5.3A use of hard-coded cryptographic key vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4 all versions, FortiSandbox ClouEPSS 0.2%Oct 13, 2026
- Medium4.9An Uncaught Exception vulnerability [CWE-248] vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4 all versions may allowEPSS 0.3%Oct 13, 2026
- Critical9.8Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.Oct 13, 2026
- Critical9.8Out-of-bounds write in Windows iSCSI allows an unauthorized attacker to execute code over a network.Oct 13, 2026
- High7.4Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.EPSS 0.8%Oct 13, 2026
- High8.8Microsoft Windows Command Injection VulnerabilityKEVEPSS 1.5%Oct 13, 2026
- High8.8Microsoft Security Advisory CVE-2026-70174 - .NET and Visual Studio Remote Code Execution VulnerabilityEPSS 0.8%Oct 13, 2026
- UnknownMicrosoft Security Advisory CVE-2026-69651 - .NET and Visual Studio Denial of Service VulnerabilityEPSS 1.1%Oct 13, 2026
- Medium5.9Microsoft Security Advisory CVE-2026-66822 - .NET and Visual Studio Information Disclosure VulnerabilityEPSS 0.7%Oct 13, 2026
- UnknownMicrosoft Security Advisory CVE-2026-58280 - .NET and Visual Studio Denial of Service VulnerabilityEPSS 1.1%Oct 13, 2026
- Critical9.8Microsoft Security Advisory CVE-2026-105016 - Microsoft QUIC Remote Code Execution VulnerabilityEPSS 1.0%Oct 13, 2026
- UnknownCVE-2026-76747 is listed by NCSC-2026-0413 [1.01] [M/H] Kwetsbaarheden verholpen in HPE Networking AOS-Switch.Oct 12, 2026
- UnknownCVE-2026-76746 is listed by NCSC-2026-0413 [1.01] [M/H] Kwetsbaarheden verholpen in HPE Networking AOS-Switch.Oct 12, 2026
- UnknownCVE-2026-76745 is listed by NCSC-2026-0413 [1.01] [M/H] Kwetsbaarheden verholpen in HPE Networking AOS-Switch.Oct 12, 2026