Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 99.98%Oct 14, 2025
- High7.8Microsoft Windows Improper Access Control VulnerabilityPatch nowKEVEPSS 2.66%Oct 14, 2025
- High7.8Microsoft Windows Untrusted Pointer Dereference VulnerabilityPatch nowKEVEPSS 6.37%Oct 14, 2025
- UnknownMicrosoft Windows Incorrect Resource Transfer Between SpheresPatch nowKEVEPSS 16.37%Aug 20, 2025
- UnknownMicrosoft Windows Improper Input ValidationPatch nowKEVEPSS 5.97%Aug 4, 2025
- UnknownMicrosoft Windows Untrusted Pointer DereferencePatch nowKEVEPSS 1.98%Aug 1, 2025
- High7.8Time-of-check time-of-use (toctou) race condition in Microsoft Windows QoS scheduler allows an authorized attacker to elevate privileges locally.Check this weekEPSS 68.00%Jul 8, 2025
- High8.8Microsoft Windows SMB Client Improper Access Control VulnerabilityPatch nowKEVEPSS 82.70%Jun 10, 2025
- High8.8Microsoft Windows External Control of File Name or Path VulnerabilityPatch nowKEVEPSS 87.02%Jun 10, 2025
- UnknownMicrosoft Windows Use After FreePatch nowKEVEPSS 16.26%Jun 10, 2025
- High7.0conda-forge openssl-feedstock before 066e83c (2024-05-20), on Microsoft Windows, configures OpenSSL to use an OPENSSLDIR file path that can be written to by non-privilged local useCheck if you run itEPSS 0.23%May 13, 2025
- High7.8Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free VulnerabilityPatch nowKEVEPSS 1.82%May 13, 2025
- High7.8Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow VulnerabilityPatch nowKEVEPSS 2.33%May 13, 2025
- High7.8Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free VulnerabilityPatch nowKEVEPSS 1.42%May 13, 2025
- High7.8Microsoft Windows DWM Core Library Use-After-Free VulnerabilityPatch nowKEVEPSS 1.92%May 13, 2025
- High7.5Microsoft Windows Scripting Engine Type Confusion VulnerabilityPatch nowKEVEPSS 27.04%May 13, 2025
- High7.8Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free VulnerabilityPatch nowKEVEPSS 13.90%Apr 8, 2025
- UnknownMicrosoft Windows Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 23.33%Apr 3, 2025
- UnknownMicrosoft Windows Protection Mechanism FailurePatch nowKEVEPSS 1.21%Apr 3, 2025
- UnknownMicrosoft Windows Improper Input ValidationPatch nowKEVEPSS 3.10%Apr 3, 2025
- UnknownMicrosoft Windows Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')Patch nowKEVEPSS 45.77%Mar 12, 2025
- Medium5.4Microsoft Windows NTLM Hash Disclosure Spoofing VulnerabilityPatch nowKEVEPSS 62.27%Mar 11, 2025
- High7.0Microsoft Windows Management Console (MMC) Improper Neutralization VulnerabilityPatch nowKEVEPSS 30.39%Mar 11, 2025
- High7.8Microsoft Windows NTFS Heap-Based Buffer Overflow VulnerabilityPatch nowKEVEPSS 2.22%Mar 11, 2025
- Medium5.5Microsoft Windows NTFS Out-Of-Bounds Read VulnerabilityPatch nowKEVEPSS 2.02%Mar 11, 2025