Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- High7.0Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.EPSS 0.2%Jul 14, 2026
- High7.8Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege VulnerabilityEPSS 0.4%Jul 14, 2026
- High7.8Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.EPSS 0.4%Jul 14, 2026
- Critical9.1Microsoft SharePoint Weak Authentication VulnerabilityKEVEPSS 69.5%Jul 14, 2026
- Critical9.8Microsoft SharePoint Deserialization of Untrusted Data VulnerabilityKEVEPSS 3.0%Jul 14, 2026
- Critical9.8Microsoft SharePoint Deserialization of Untrusted Data VulnerabilityKEVEPSS 15.9%Jul 14, 2026
- Critical9.8Microsoft SharePoint Server Missing Authentication for Critical Function VulnerabilityKEVEPSS 1.0%Jul 14, 2026
- High7.8Microsoft Active Directory Federation Services Insufficient Granularity of Access Control VulnerabilityKEVEPSS 0.3%Jul 14, 2026
- UnknownMicrosoft Windows Improper Link Resolution Before File Access ('Link Following')KEVEPSS 0.4%Jul 10, 2026
- Low2.1swoosh has email-derived URL path injection in Microsoft Graph endpointEPSS 0.2%Jul 6, 2026
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: ip6_vti: fix incorrect tunnel matching in vti6_tnl_lookup() In vti6_tnl_lookup(), when an exact match for a tunnEPSS 0.6%Jun 25, 2026
- Critical9.4In the Linux kernel, the following vulnerability has been resolved: netfilter: require Ethernet MAC header before using eth_hdr() , , the , , and ipset types, and access after eithEPSS 0.4%Jun 25, 2026
- UnknownMicrosoft SharePoint Server Remote Code Execution VulnerabilityKEVEPSS 15.2%Jun 24, 2026
- Critical9.2SQLite 'sqldiff.exe' does not securely handle the way the Microsoft Windows C runtime converts Unicode characters to ANSI codepages.EPSS 0.4%Jun 4, 2026
- Medium6.7Memory corruption in windows drivers while sending incorrect trusted application requestJun 1, 2026
- High8.0Improper neutralization of special elements used in an os command ('os command injection') in Microsoft Office SharePoint allows an authorized attacker to execute code…Jun 1, 2026
- High7.4Tychon includes an OpenSSL component that specifies an OPENSSLDIR variable as a subdirectory that may be controllable by an unprivileged user on Windows.Jun 1, 2026
- High8.5Privilege chaining issue exists in ServerView Agents for Windows V11.60.04 and earlier.Jun 1, 2026
- High8.5Incorrect permission assignment for critical resource issue exists in ServerView Agents for Windows V11.60.04 and earlier.Jun 1, 2026
- High7.8Roslyn CodeLens MCP Server is a Roslyn-based MCP server providing semantic code intelligence for .NET codebases.May 29, 2026
- High8.8Use after free in UI in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code via a crafted HTML page.May 28, 2026
- Low3.1Race in WebRTC in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker to leak cross-origin data via a crafted HTML page.May 28, 2026
- High8.8Use after free in Media in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.May 28, 2026
- High8.8Out of bounds read in ANGLE in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code via a crafted HTML page.May 28, 2026
- Medium4.3Out of bounds read in Dawn in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker to leak cross-origin data via a crafted HTML page.May 28, 2026