Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- High7.0Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.EPSS 0.2%Jul 14, 2026
- High7.8Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege VulnerabilityEPSS 0.4%Jul 14, 2026
- High7.8Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.EPSS 0.4%Jul 14, 2026
- Critical9.1Microsoft SharePoint Weak Authentication VulnerabilityKEVEPSS 69.5%Jul 14, 2026
- Critical9.8Microsoft SharePoint Deserialization of Untrusted Data VulnerabilityKEVEPSS 3.0%Jul 14, 2026
- Critical9.8Microsoft SharePoint Deserialization of Untrusted Data VulnerabilityKEVEPSS 15.9%Jul 14, 2026
- Critical9.8Microsoft SharePoint Server Missing Authentication for Critical Function VulnerabilityKEVEPSS 1.0%Jul 14, 2026
- High7.8Microsoft Active Directory Federation Services Insufficient Granularity of Access Control VulnerabilityKEVEPSS 0.3%Jul 14, 2026
- UnknownMicrosoft Windows Improper Link Resolution Before File Access ('Link Following')KEVEPSS 0.4%Jul 10, 2026
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: ip6_vti: fix incorrect tunnel matching in vti6_tnl_lookup() In vti6_tnl_lookup(), when an exact match for a tunnEPSS 0.6%Jun 25, 2026
- Critical9.4In the Linux kernel, the following vulnerability has been resolved: netfilter: require Ethernet MAC header before using eth_hdr() , , the , , and ipset types, and access after eithEPSS 0.4%Jun 25, 2026
- UnknownMicrosoft SharePoint Server Remote Code Execution VulnerabilityKEVEPSS 15.2%Jun 24, 2026
- Critical9.2SQLite 'sqldiff.exe' does not securely handle the way the Microsoft Windows C runtime converts Unicode characters to ANSI codepages.EPSS 0.4%Jun 4, 2026
- High8.8Use after free in UI in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code via a crafted HTML page.May 28, 2026
- Low3.1Race in WebRTC in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker to leak cross-origin data via a crafted HTML page.May 28, 2026
- High8.8Use after free in Media in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.May 28, 2026
- High8.8Out of bounds read in ANGLE in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code via a crafted HTML page.May 28, 2026
- Medium4.3Out of bounds read in Dawn in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker to leak cross-origin data via a crafted HTML page.May 28, 2026
- Critical9.8Marten is a .NET Transactional Document DB and Event Store on PostgreSQL.EPSS 0.5%May 28, 2026
- High7.3This vulnerability in Veeam Agent for Microsoft Windows allows for Local Privilege Escalation.KEVEPSS 0.2%May 28, 2026
- High7.8NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker could cause an out-of-bounds write.EPSS 0.2%May 26, 2026
- High7.8NVIDIA Display Driver for Windows contains a vulnerability where an attacker could cause a time-of-check time-of-use issue.EPSS 0.1%May 26, 2026
- High7.8NVIDIA Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a user could cause improper access to GPU resources.EPSS 0.2%May 26, 2026
- Medium6.5NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker could leak held driver locks.EPSS 0.1%May 26, 2026
- Medium6.0NVIDIA Display Driver for Windows and Linux contains a vulnerability in the kernel driver, where a user could cause an incorrect permission assignment for a critical resource.EPSS 0.2%May 26, 2026