Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.0Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.26%Apr 14, 2026
- High8.8Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.Check if you run itEPSS 0.82%Apr 14, 2026
- Medium5.5Improper link resolution before file access ('link following') in Universal Plug and Play (upnp.dll) allows an authorized attacker to disclose information locally.Check if you run itEPSS 0.37%Apr 14, 2026
- High7.8Use after free in Windows Container Isolation FS Filter Driver allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.33%Apr 14, 2026
- High7.5Out-of-bounds read in Windows HTTP.sys allows an unauthorized attacker to deny service over a network.Check if you run itEPSS 1.17%Apr 14, 2026
- Medium5.5Insertion of sensitive information into log file in Windows Kernel allows an authorized attacker to disclose information locally.Check if you run itEPSS 0.50%Apr 14, 2026
- Medium5.5Insertion of sensitive information into log file in Windows Kernel allows an authorized attacker to disclose information locally.Check if you run itEPSS 0.48%Apr 14, 2026
- Medium5.5Insertion of sensitive information into log file in Windows Kernel allows an authorized attacker to disclose information locally.Check if you run itEPSS 0.48%Apr 14, 2026
- High7.8Improper neutralization of special elements used in a command ('command injection') in Windows Snipping Tool allows an unauthorized attacker to execute code locally.Check if you run itEPSS 0.46%Apr 14, 2026
- Medium5.5Improper privilege management in Microsoft Windows allows an authorized attacker to deny service locally.Check if you run itEPSS 0.42%Apr 14, 2026
- Medium5.4User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.Check if you run itEPSS 0.41%Apr 10, 2026
- High7.0Libcap: libcap: privilege escalation via toctou race condition in cap_set_file()Check if you run itEPSS 0.14%Apr 9, 2026
- High7.2Web3.py 7.15.0 through 7.16.0 and 8.0.0b2 through 8.0.0 CCIP-Read SSRF BypassCheck if you run itEPSS 0.34%Apr 4, 2026
- Critical9.8lodash vulnerable to Code Injection via imports key namesCheck if you run itEPSS 2.62%Mar 31, 2026
- Medium6.5The _.unset and _.omit functions in Lodash are vulnerable to prototype pollution.Check if you run itEPSS 0.40%Mar 31, 2026
- High7.5Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processingCheck if you run itEPSS 1.11%Mar 19, 2026
- High7.5Libarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchiveCheck if you run itEPSS 0.70%Mar 13, 2026
- High8.5An OS Command Injection vulnerability in TP-Link Archer BE230 v1.2 and Archer AXE75 v2 (web modules) allows adjacent authenticated attacker to execute arbitrary code.Check if you run itEPSS 1.57%Feb 2, 2026
- UnknownSecurity exception in com.alibaba.fastjson2.JSONReader.readArrayOpen the advisoryJul 15, 2025
- High7.8KVM: Reject attempts to consume or refresh inactive gfn_to_pfn_cacheCheck this weekEPSS 19.00%May 1, 2025
- High7.8octeontx2-pf: Fix SQE threshold checkingCheck this weekEPSS 18.00%May 1, 2025
- High7.8mm/hugetlb: fix PTE marker handling in hugetlb_change_protection()Check if you run itEPSS 0.17%Mar 27, 2025
- High7.5ovl: Use "buf" flexible array for memcpy() destinationCheck if you run itEPSS 0.44%Mar 27, 2025
- High7.5can: j1939: fix errant WARN_ON_ONCE in j1939_session_deactivateCheck if you run itEPSS 0.58%Mar 27, 2025
- UnknownUNKNOWN READ in _blit_xrgb32_lerp_spansOpen the advisoryMar 15, 2025