Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8Double free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.Check this weekEPSS 43.00%Jul 8, 2025
- Medium5.5Buffer over-read in Storage Port Driver allows an authorized attacker to disclose information locally.Check this weekEPSS 51.00%Jul 8, 2025
- High7.8Integer overflow or wraparound in Virtual Hard Disk (VHDX) allows an unauthorized attacker to execute code locally.Check if you run itEPSS 2.06%Jul 8, 2025
- Medium6.5Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.Check if you run itEPSS 1.20%Jul 8, 2025
- High7.3Improper link resolution before file access ('link following') in Windows Performance Recorder allows an authorized attacker to deny service locally.Check this weekEPSS 56.00%Jul 8, 2025
- High7.8Numeric truncation error in Windows Shell allows an authorized attacker to elevate privileges locally.Check this weekEPSS 43.00%Jul 8, 2025
- High7.2Heap-based buffer overflow in Windows Kernel allows an authorized attacker to execute code over a network.Check if you run itEPSS 1.42%Jul 8, 2025
- High7.8Concurrent execution using shared resource with improper synchronization ('race condition') in Workspace Broker allows an authorized attacker to elevate privileges locally.Check this weekEPSS 32.00%Jul 8, 2025
- High8.8Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.Check this weekEPSS 92.00%Jul 8, 2025
- Medium4.1Dradis through 4.16.0 allows referencing external images (resources) over HTTPS, instead of forcing the use of embedded (uploaded) images.Check this weekEPSS 28.00%Jul 5, 2025
- High7.6During startup, the device automatically logs in the EPC2 Windows user without requesting a password.Check this weekEPSS 27.00%Jul 3, 2025
- High7.6The hard drives of the device are not encrypted using a full volume encryption feature such as BitLocker.Check this weekEPSS 13.00%Jul 3, 2025
- Medium6.5ASNA Assist and ASNA Registrar before 2025-03-31 allow deserialization attacks against .NET remoting.Check this weekEPSS 45.00%Jul 3, 2025
- High8.4In Tenable Nessus versions prior to 10.8.5 on a Windows host, it was found that a non-administrative user could overwrite arbitrary local system files with log content at SYSTEM prCheck this weekEPSS 19.00%Jul 1, 2025
- High7.8Electron is an open source framework for writing cross-platform desktop applications using JavaScript, HTML and CSS.Check this weekEPSS 12.00%Jul 1, 2025
- High8.5Multiple Brother driver installers for Windows contain a privilege escalation vulnerability.Check this weekEPSS 18.00%Jun 25, 2025
- High8.0Cyberduck and Mountain Duck improperly handle TLS certificate pinning for untrusted certificates (e.g., self-signed), unnecessarily installing it to the Windows Certificate Store oCheck this weekEPSS 19.00%Jun 25, 2025
- Medium5.4Insufficient data validation in DevTools in Google Chrome on Windows prior to 138.0.7204.49 allowed a remote attacker who convinced a user to engage in specific UI gestures to execCheck this weekEPSS 23.00%Jun 24, 2025
- Medium6.1A vulnerability allowing local system users to modify directory contents, allowing for arbitrary code execution on the local system with elevated permissions.Check this weekEPSS 25.00%Jun 18, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: drm/i915/ttm: fix CCS handling Crucible + recent Mesa seems to sometimes hit: GEM_BUG_ON(num_ccs_blks > NUM_CCS_Check if you run itEPSS 0.21%Jun 18, 2025
- High8.6Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Secure Access Client for WindowsCheck this weekEPSS 15.00%Jun 17, 2025
- High7.3Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for WindowsCheck this weekEPSS 13.00%Jun 17, 2025
- High7.8In Tenable Agent versions prior to 10.8.5 on a Windows host, it was found that a non-administrative user could execute code with SYSTEM privilege.Check this weekEPSS 20.00%Jun 16, 2025
- High7.1Path traversal in Google Web Designer's template handling versions prior to 16.3.0.0407 on Windows allows attacker to achieve remote code execution by tricking users into downloadiCheck if you run itEPSS 0.61%Jun 12, 2025
- Medium4.6A vulnerability has been identified in Mendix Studio Pro 10 (All versions < V10.24.24 for Windows), Mendix Studio Pro 10 (All versions < V10.24.24 for Mac), Mendix Studio Pro 11 (ACheck if you run itEPSS 0.46%Jun 12, 2025