Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Native WiFi Miniport Driver allows an unauthorized attacker to e…Check if you run itEPSS 0.32%May 12, 2026
- Medium6.7Double free in Windows Rich Text Edit allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.32%May 12, 2026
- High8.5Improper input validation for some Intel(R) QAT software drivers for Windows before version 1.13 within Ring 3: User Applications may allow an escalation of privilege.Check if you run itEPSS 0.11%May 12, 2026
- High8.5Out-of-bounds write for some Intel(R) QAT software drivers for Windows before version 1.13 within Ring 3: User Applications may allow a escalation of privilege.Check if you run itEPSS 0.11%May 12, 2026
- Medium6.8Null pointer dereference for some Intel(R) QAT software drivers for Windows before version 2.6.0 within Ring 3: User Applications may allow a denial of service.Check if you run itEPSS 0.10%May 12, 2026
- Medium6.9Improper input validation for some Intel(R) QAT software drivers for Windows before version 2.6 within Ring 3: User Applications may allow a denial of service.Check if you run itEPSS 0.10%May 12, 2026
- Medium6.8Divide by zero for some Intel(R) QAT software drivers for Windows before version 1.13 within Ring 3: User Applications may allow a denial of service.Check if you run itEPSS 0.10%May 12, 2026
- Medium4.8Unchecked return value for some Intel(R) QAT software drivers for Windows before version 1.13 within Ring 3: User Applications may allow a denial of service.Check if you run itEPSS 0.10%May 12, 2026
- Medium6.9Buffer overflow for some Intel(R) QAT software drivers for Windows before version 1.13 within Ring 3: User Applications may allow a denial of service.Check if you run itEPSS 0.10%May 12, 2026
- Medium6.9Null pointer dereference for some Intel(R) QAT software drivers for Windows before version 1.13 within Ring 3: User Applications may allow a denial of service.Check if you run itEPSS 0.10%May 12, 2026
- Medium6.9Improper input validation for some Intel(R) QAT software drivers for Windows before version 1.13 within Ring 3: User Applications may allow a denial of service.Check if you run itEPSS 0.10%May 12, 2026
- Medium6.8Improper buffer restrictions for some Display Virtualization for Windows OS driver software within Ring 2: Device Drivers may allow a denial of service.Check if you run itEPSS 0.10%May 12, 2026
- High7.3YetAnotherForum.NET (YAF.NET) is a C# ASP.NET forum.Check if you run itEPSS 0.35%May 12, 2026
- High8.1YetAnotherForum.NET (YAF.NET) is a C# ASP.NET forum.Check if you run itEPSS 0.38%May 12, 2026
- High8.8YetAnotherForum.NET (YAF.NET) is a C# ASP.NET forum.Check if you run itEPSS 0.64%May 12, 2026
- High8.5A vulnerability chain in Cribl Edge for Windows before 4.17.1 allows a local authenticated user to escalate privileges to NT AUTHORITY\SYSTEM.Check if you run itEPSS 0.40%May 12, 2026
- Medium6.5kafka-sink-azure-kusto Kafka Connect plugin is the official Microsoft sink for Azure Data Explorer (Kusto).Check if you run itEPSS 0.48%May 11, 2026
- Medium6.0Corteza contains a SQL injection vulnerability in its Microsoft SQL Server (MSSQL) backend when filtering Compose records by the meta field.This issue affects corteza: 2024.9.8.Check if you run itEPSS 0.28%May 11, 2026
- Medium5.5OpenMcdf is a fully .NET / C# library to manipulate Compound File Binary File Format files, also known as Structured Storage.Check if you run itEPSS 0.19%May 8, 2026
- High7.8NAVER MYBOX Explorer for Windows before 3.0.11.160 allows a local attacker to escalate privileges to NT AUTHORITY\SYSTEM via registry manipulation due to improper privilege checks.Check if you run itEPSS 0.14%May 8, 2026
- High7.5Exposure of sensitive information to an unauthorized actor in Azure DevOps allows an unauthorized attacker to disclose information over a network.Check if you run itEPSS 1.17%May 7, 2026
- High8.1Server-side request forgery (ssrf) in Azure Notification Service allows an authorized attacker to elevate privileges over a network.Check if you run itEPSS 0.69%May 7, 2026
- Critical10.0Improper access control in Azure AI Foundry M365 published agents allows an unauthorized attacker to elevate privileges over a network.Check if you run itEPSS 1.08%May 7, 2026
- Critical9.6Improper neutralization of special elements used in a command ('command injection') in Azure Cloud Shell allows an unauthorized attacker to perform spoofing over a network.Check if you run itEPSS 0.86%May 7, 2026
- High8.2Externally controlled reference to a resource in another sphere in Microsoft Partner Center allows an unauthorized attacker to perform spoofing over a network.Check if you run itEPSS 0.60%May 7, 2026