Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.0Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.26%Jul 14, 2026
- High7.0Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.20%Jul 14, 2026
- High7.8Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege VulnerabilityCheck if you run itEPSS 0.36%Jul 14, 2026
- High7.8Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.36%Jul 14, 2026
- Medium4.1A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4…Check if you run itEPSS 0.31%Jul 14, 2026
- Critical9.1subsys/net/lib/lwm2m/lwm2m_pull_context.c copied the firmware-update Package URI into a fixed static buffer (context.uri, size CONFIG_LWM2M_SWMGMT_PACKAGE_URI_LEN, def…Check if you run itEPSS 0.58%Jul 14, 2026
- High7.1In Zephyr's kernel pipe implementation, the userspace syscall verifier z_vrfy_k_pipe_init() in kernel/pipe.c used K_SYSCALL_OBJ() (which requires the kernel object to…Check if you run itEPSS 0.16%Jul 14, 2026
- Medium5.5The CONFIG_USERSPACE verification handler for the k_thread_name_copy() system call (z_vrfy_k_thread_name_copy() in kernel/thread.c) calls k_object_find() on the caller…Check if you run itEPSS 0.15%Jul 14, 2026
- High7.8On Xtensa SoCs built with CONFIG_XTENSA_MPU and CONFIG_USERSPACE, arch_buffer_validate() in arch/xtensa/core/mpu.c — the architecture hook that verifies a user-mode-su…Check if you run itEPSS 0.18%Jul 14, 2026
- Medium6.6A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, Fort…Check if you run itEPSS 0.67%Jul 14, 2026
- Critical9.1Microsoft SharePoint Weak Authentication VulnerabilityPatch nowKEVEPSS 69.54%Jul 14, 2026
- Critical9.8Microsoft SharePoint Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 3.04%Jul 14, 2026
- UnknownBoldGrid w3_total_cache Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 2.86%Jul 14, 2026
- Medium5.0Path traversal in CLI command allows deletion of root file systemCheck if you run itEPSS 0.25%Jul 14, 2026
- UnknownCross-Site Scripting in Domain parameterCheck if you run itEPSS 0.24%Jul 14, 2026
- UnknownMissed certificate verification in AD Connector communication with FortiClient EMSCheck if you run itEPSS 0.22%Jul 14, 2026
- Critical9.8Microsoft SharePoint Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 15.87%Jul 14, 2026
- Critical9.8Microsoft SharePoint Server Missing Authentication for Critical Function VulnerabilityPatch nowKEVEPSS 1.01%Jul 14, 2026
- High7.8Microsoft Active Directory Federation Services Insufficient Granularity of Access Control VulnerabilityPatch nowKEVEPSS 0.35%Jul 14, 2026
- UnknownSSL-VPN Reflected XSSCheck if you run itEPSS 0.39%Jul 14, 2026
- High7.2SonicWall SMA1000 Appliances Code Injection VulnerabilityPatch nowKEVEPSS 11.79%Jul 14, 2026
- Critical10.0SonicWall SMA1000 Appliances Server-Side Request Forgery VulnerabilityPatch nowKEVEPSS 6.79%Jul 14, 2026
- UnknownHeader injection in captive portal authentication formCheck if you run itEPSS 0.37%Jul 14, 2026
- UnknownHeader injection in Web Filter warning pageCheck if you run itEPSS 0.27%Jul 14, 2026
- Medium5.5PraisonAI: Coarse-Grained Tool Approval Cache Bypasses Per-Invocation Consent for Shell CommandsCheck if you run itEPSS 0.18%Jul 13, 2026
Sort