Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.Check if you run itEPSS 0.50%Oct 13, 2026
- Medium6.5Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.Check if you run itEPSS 0.63%Oct 13, 2026
- High8.8Microsoft Office SharePoint Elevation of Privilege VulnerabilityCheck if you run itEPSS 0.95%Oct 13, 2026
- High7.5Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.Check if you run itEPSS 0.54%Oct 13, 2026
- High7.2Inclusion of functionality from untrusted control sphere in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.Check if you run itEPSS 0.90%Oct 13, 2026
- High8.8Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.Check if you run itEPSS 0.98%Oct 13, 2026
- High7.8Windows Shell Elevation of Privilege VulnerabilityCheck if you run itEPSS 0.33%Oct 13, 2026
- High7.0Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.29%Oct 13, 2026
- High7.0Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.29%Oct 13, 2026
- Medium6.5Improper input validation in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.Check if you run itEPSS 0.96%Oct 13, 2026
- Medium4.3Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.Check if you run itEPSS 0.43%Oct 13, 2026
- Medium5.7Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over an adjacent network.Check if you run itEPSS 0.37%Oct 13, 2026
- Critical9.8Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.Check if you run itEPSS 0.87%Oct 13, 2026
- Critical9.8Heap-based buffer overflow in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.Check if you run itEPSS 0.94%Oct 13, 2026
- Critical9.8Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network.Check if you run itEPSS 0.98%Oct 13, 2026
- Critical9.8Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network.Check if you run itEPSS 0.98%Oct 13, 2026
- High7.8Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.32%Oct 13, 2026
- High7.0Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.25%Oct 13, 2026
- High8.1Improper verification of cryptographic signature in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network.Check if you run itEPSS 0.54%Oct 13, 2026
- Medium6.5Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.Check if you run itEPSS 0.77%Oct 13, 2026
- Medium4.6Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a networkCheck if you run itEPSS 0.36%Oct 13, 2026
- High8.8Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.Check if you run itEPSS 0.89%Oct 13, 2026
- High8.8Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.Check if you run itEPSS 0.70%Oct 13, 2026
- High8.8Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.Check if you run itEPSS 0.70%Oct 13, 2026
- High8.8Improper access control in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.Check if you run itEPSS 0.70%Oct 13, 2026
Sort