Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- High7.8Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.EPSS 0.3%Mar 10, 2026
- High8.8Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to elevate privileges over an adjacent network.EPSS 0.6%Mar 10, 2026
- High7.8Improper link resolution before file access ('link following') in Winlogon allows an authorized attacker to elevate privileges locally.KEVEPSS 3.2%Mar 10, 2026
- Medium5.5Exposure of sensitive information to an unauthorized actor in Windows Accessibility Infrastructure (ATBroker.exe) allows an authorized attacker to disclose information locally.EPSS 0.6%Mar 10, 2026
- Medium5.3Exposure of sensitive information to an unauthorized actor in Windows Shell Link Processing allows an unauthorized attacker to perform spoofing over a network.EPSS 1.1%Mar 10, 2026
- High7.5Out-of-bounds read in Windows GDI+ allows an unauthorized attacker to disclose information over a network.EPSS 1.4%Mar 10, 2026
- High7.0Improper validation of specified type of input in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.EPSS 0.3%Mar 10, 2026
- High7.0Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.EPSS 0.3%Mar 10, 2026
- High8.8Improper restriction of names for files and other resources in Active Directory Domain Services allows an authorized attacker to elevate privileges over a network.EPSS 1.3%Mar 10, 2026
- High7.8Improper access control in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.EPSS 0.4%Mar 10, 2026
- High7.8Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.EPSS 0.4%Mar 10, 2026
- High7.8Out-of-bounds read in Windows Extensible File Allocation allows an authorized attacker to elevate privileges locally.EPSS 0.4%Mar 10, 2026
- High8.0Integer overflow or wraparound in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network.EPSS 0.9%Mar 10, 2026
- High8.0Integer overflow or wraparound in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network.EPSS 0.9%Mar 10, 2026
- High7.0Use after free in Windows Authentication Methods allows an authorized attacker to elevate privileges locally.EPSS 0.3%Mar 10, 2026
- High7.0Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.EPSS 0.3%Mar 10, 2026
- Medium5.5Divide by zero in Microsoft Graphics Component allows an unauthorized attacker to deny service locally.EPSS 0.5%Mar 10, 2026
- Medium5.5Null pointer dereference in Microsoft Graphics Component allows an unauthorized attacker to deny service locally.EPSS 0.5%Mar 10, 2026
- High7.4Use after free in Microsoft Brokering File System allows an unauthorized attacker to elevate privileges locally.EPSS 0.3%Mar 10, 2026
- High7.8Deserialization of untrusted data in Windows System Image Manager allows an authorized attacker to execute code locally.EPSS 1.7%Mar 10, 2026
- High7.8Null pointer dereference in Windows Performance Counters allows an authorized attacker to elevate privileges locally.EPSS 0.4%Mar 10, 2026
- Medium4.8Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kerberos allows an unauthorized attacker to bypass a security fe…EPSS 0.4%Mar 10, 2026
- High7.0Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Device Association Service allows an authorized attacker to elev…EPSS 0.2%Mar 10, 2026
- High7.0Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Device Association Service allows an authorized attacker to elev…EPSS 0.2%Mar 10, 2026
- High7.8Improper authentication in Windows SMB Server allows an authorized attacker to elevate privileges locally.EPSS 4.9%Mar 10, 2026