Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.7External control of file name or path in Microsoft Defender for Endpoint allows an authorized attacker to elevate privileges locally.Check this weekEPSS 44.00%May 13, 2025
- High7.0conda-forge openssl-feedstock before 066e83c (2024-05-20), on Microsoft Windows, configures OpenSSL to use an OPENSSLDIR file path that can be written to by non-privilged local useCheck if you run itEPSS 0.23%May 13, 2025
- High7.8Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free VulnerabilityPatch nowKEVEPSS 1.82%May 13, 2025
- High7.8Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow VulnerabilityPatch nowKEVEPSS 2.33%May 13, 2025
- High7.8Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free VulnerabilityPatch nowKEVEPSS 1.42%May 13, 2025
- High7.8Microsoft Windows DWM Core Library Use-After-Free VulnerabilityPatch nowKEVEPSS 1.92%May 13, 2025
- High7.5Microsoft Windows Scripting Engine Type Confusion VulnerabilityPatch nowKEVEPSS 27.04%May 13, 2025
- High8.7Deserialization of untrusted data in Microsoft Dataverse allows an authorized attacker to execute code over a network.Check if you run itEPSS 3.71%May 8, 2025
- Critical9.1Server-Side Request Forgery (SSRF) in Microsoft Power Apps allows an unauthorized attacker to disclose information over a networkCheck if you run itEPSS 1.99%May 8, 2025
- Critical10.0Authentication bypass by assumed-immutable data in Azure DevOps allows an unauthorized attacker to elevate privileges over a network.Check if you run itEPSS 1.77%May 8, 2025
- Critical9.9Improper authorization in Azure Automation allows an authorized attacker to elevate privileges over a network.Check if you run itEPSS 1.67%May 8, 2025
- Critical9.9Server-side request forgery (ssrf) in Azure Storage Resource Provider allows an authorized attacker to perform spoofing over a network.Check if you run itEPSS 3.54%May 8, 2025
- High8.1Improper access control in Azure allows an unauthorized attacker to disclose information over a network.Check if you run itEPSS 1.82%May 8, 2025
- Medium6.5User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.Check if you run itEPSS 0.88%May 2, 2025
- High8.5Missing authorization in Azure Virtual Desktop allows an authorized attacker to elevate privileges over a network.Check this weekEPSS 79.00%Apr 30, 2025
- Critical9.8Improper authorization in Azure Bot Framework SDK allows an unauthorized attacker to elevate privileges over a network.Check if you run itEPSS 1.09%Apr 30, 2025
- High7.5Improper verification of cryptographic signature in Microsoft Azure Functions allows an authorized attacker to execute code over a network.Check if you run itEPSS 0.58%Apr 30, 2025
- Critical9.9Improper authorization in Azure allows an authorized attacker to elevate privileges over a network.Check if you run itEPSS 0.97%Apr 30, 2025
- High8.7Improper authorization in Azure Bot Framework SDK allows an unauthorized attacker to elevate privileges over a network.Check if you run itEPSS 0.88%Apr 30, 2025
- High8.1Improper input validation in Microsoft Dynamics allows an unauthorized attacker to disclose information over a network.Check if you run itEPSS 1.39%Apr 30, 2025
- High7.3BleachBit cleans files to free disk space and to maintain privacy.Check if you run itEPSS 0.24%Apr 15, 2025
- Medium5.7Uncontrolled search path element in Power Automate allows an authorized attacker to disclose information over a network.Check if you run itEPSS 0.91%Apr 15, 2025
- UnknownMicrosoft SharePoint Deserialization of Untrusted DataPatch nowKEVEPSS 45.22%Apr 9, 2025
- UnknownMicrosoft SharePoint Deserialization of Untrusted DataPatch nowKEVEPSS 52.90%Apr 9, 2025
- High7.8Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free VulnerabilityPatch nowKEVEPSS 13.90%Apr 8, 2025