Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.4Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Security Center allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.25%Oct 13, 2026
- High8.1Affected Microsoft products: Microsoft Exchange Server Subscription Edition RTM, Microsoft Exchange Server 2019 Cumulative Update 15, Microsoft Exchange Server 2019 Cu…Check if you run itEPSS 1.39%Oct 13, 2026
- Medium6.5Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.Check if you run itEPSS 1.23%Oct 13, 2026
- Critical9.3Affected Microsoft products: Microsoft Exchange Server 2016 Cumulative Update 23, Microsoft Exchange Server 2019 Cumulative Update 15, Microsoft Exchange Server Subscr…Check if you run itEPSS 1.29%Oct 13, 2026
- High8.8Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.Check if you run itEPSS 0.86%Oct 13, 2026
- Medium4.9Improper access control in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.Check if you run itEPSS 0.97%Oct 13, 2026
- High7.5Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.Check if you run itEPSS 0.57%Oct 13, 2026
- High8.1Affected Microsoft products: .NET 11.0 installed on Windows, .NET 10.0 installed on Windows, .NET 9.0 installed on Windows, .NET 8.0 installed on Windows.Check if you run itEPSS 0.79%Oct 13, 2026
- High7.5Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network.Check if you run itEPSS 0.63%Oct 13, 2026
- High7.5Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to deny service over a network.Check if you run itEPSS 1.27%Oct 13, 2026
- High8.1Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.Check if you run itEPSS 0.66%Oct 13, 2026
- Medium6.5Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.Check if you run itEPSS 0.95%Oct 13, 2026
- Critical9.8Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.Check if you run itEPSS 0.95%Oct 13, 2026
- Critical9.8Out-of-bounds write in Windows iSCSI allows an unauthorized attacker to execute code over a network.Check if you run itEPSS 0.97%Oct 13, 2026
- High8.8Affected Microsoft products: Windows Server 2019, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019 (Server Core installation), Windows 10 Version 1809 for 32-bitCheck if you run itEPSS 0.38%Oct 13, 2026
- High8.8Windows SmartScreen Security Feature Bypass VulnerabilityCheck if you run itEPSS 1.00%Oct 13, 2026
- High7.8Microsoft Windows Search Component Elevation of Privilege VulnerabilityCheck if you run itEPSS 0.36%Oct 13, 2026
- High7.0Windows Backup Engine Elevation of Privilege VulnerabilityCheck if you run itEPSS 0.30%Oct 13, 2026
- High7.0Windows Autopilot Elevation of Privilege VulnerabilityCheck if you run itEPSS 0.29%Oct 13, 2026
- High7.8Windows Modern Device Management (MDM) Elevation of Privilege VulnerabilityCheck if you run itEPSS 0.36%Oct 13, 2026
- High7.0Windows Kerberos Elevation of Privilege VulnerabilityCheck if you run itEPSS 0.28%Oct 13, 2026
- High7.5Active Directory Federation Services (AD FS) Spoofing VulnerabilityCheck if you run itEPSS 0.86%Oct 13, 2026
- High7.8Affected Microsoft products: Windows 11 Version 26H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for x64-based Systems, WindowsCheck if you run itEPSS 0.38%Oct 13, 2026
- Medium6.5Affected Microsoft products: Windows Server 2016 (Server Core installation), Windows Server 2019 (Server Core installation), Windows Server 2012, Windows 10 Version 21…Check if you run itEPSS 1.08%Oct 13, 2026
- Medium6.5Affected Microsoft products: Windows 10 Version 21H2 for 32-bit Systems, Windows Server 2019 (Server Core installation), Windows 10 Version 1607 for 32-bit Systems, Wi…Check if you run itEPSS 1.08%Oct 13, 2026
Sort