Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- Medium6.5XML Notepad is a Windows program that provides a simple intuitive User Interface for browsing and editing XML documents.EPSS 1.4%Mar 31, 2026
- High8.6A security audit identified a privilege escalation vulnerability in Operations Agent(<=OA 12.29) on Windows.EPSS 0.1%Mar 31, 2026
- Medium5.3An incorrect startup configuration of affected versions of Zscaler Client Connector on Windows may cause a limited amount of traffic from being inspected under rare circumstances.EPSS 0.2%Mar 31, 2026
- High7.0Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Thales Sentinel LDK Runtime on Windows allows Stored XSS.Mar 27, 2026
- High8.5The installer of RATOC RAID Monitoring Manager for Windows allows to customize the installation folder.EPSS 0.2%Mar 26, 2026
- High8.4The installer of RATOC RAID Monitoring Manager for Windows searches the current directory to load certain DLLs.EPSS 0.2%Mar 26, 2026
- UnknownMicrosoft Windows Improper Control of Generation of Code ('Code Injection')KEVEPSS 96.0%Mar 23, 2026
- Medium6.5Greenshot is an open source Windows screenshot utility.EPSS 0.2%Mar 20, 2026
- High8.8Integer overflow in ANGLE in Google Chrome on Windows prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.Mar 20, 2026
- Medium6.7Netskope was notified about a potential gap in its Endpoint DLP Module for Netskope Client on Windows systems.EPSS 0.2%Mar 17, 2026
- Medium6.8Netskope was notified about a potential gap in its Endpoint DLP Module for Netskope Client on Windows systems.EPSS 0.1%Mar 17, 2026
- Medium4.8Improper Neutralization of Input During Web Page Generation in Forcepoint Web Security (On-Prem) on Windows allows Stored XSS.This issue affects Web Security through 8.5.6.EPSS 0.2%Mar 16, 2026
- High8.4A DLL search order hijacking vulnerability in Thermalright TR-VISION HOME on Windows (64-bit) allows a local attacker to escalate privileges via DLL side-loading.Mar 16, 2026
- UnknownRisk of Buffer Overflow Vulnerability when installed from source on Windows R < 4.2Mar 13, 2026
- High8.8A vulnerability allowing local privilege escalation on Windows-based Veeam Backup & Replication servers.EPSS 0.2%Mar 12, 2026
- Medium6.9R 3.4.4 on Windows x64 contains a buffer overflow vulnerability in the GUI Preferences language menu field that allows local attackers to bypass DEP and ASLR protections.EPSS 0.1%Mar 11, 2026
- High7.8Improper Privilege Management in certain Zoom Clients for Windows may allow an authenticated user to conduct an escalation of privilege via local access.EPSS 0.1%Mar 11, 2026
- High7.8Improper Input Validation in Zoom Rooms for Windows before 6.6.5 in Kiosk Mode may allow an authenticated user to conduct an escalation of privilege via local access.EPSS 0.2%Mar 11, 2026
- Medium6.5Git for Windows is the Windows port of Git.EPSS 0.3%Mar 10, 2026
- High7.8Improper authentication in Azure Arc allows an authorized attacker to elevate privileges locally.EPSS 0.3%Mar 10, 2026
- High7.8Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.EPSS 0.3%Mar 10, 2026
- High7.8Improper authentication in Windows SMB Server allows an authorized attacker to elevate privileges locally.EPSS 0.4%Mar 10, 2026
- High7.8Authentication bypass using an alternate path or channel in Azure Windows Virtual Machine Agent allows an authorized attacker to elevate privileges locally.EPSS 0.3%Mar 10, 2026
- High8.0Integer overflow or wraparound in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network.EPSS 0.8%Mar 10, 2026
- High7.8Untrusted search path in Windows GDI allows an unauthorized attacker to execute code locally.EPSS 0.5%Mar 10, 2026