Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.2An issue in MongoDB Server's handling of timeseries collections could allow an authenticated user with write privileges to cause an internal data structure to become i…Check if you run itEPSS 0.34%Aug 11, 2026
- High7.7An issue in MongoDB Server's handling of timeseries bucket lifecycle could allow an authenticated user with write privileges to cause an internal reference to be used…Check if you run itEPSS 0.57%Aug 11, 2026
- Critical9.0An issue in MongoDB Server's intra-cluster connection setup could allow a party with suitable network access to influence which authentication mechanism is used when o…Check if you run itEPSS 0.36%Aug 11, 2026
- High7.2An issue in MongoDB Server could allow an authenticated user with a limited database-scoped role to perform an action against protected system collections that their a…Check if you run itEPSS 0.41%Aug 11, 2026
- High7.1An issue in MongoDB Server's aggregation framework could allow an authenticated user to trigger an out-of-bounds memory read by providing a specially formed numeric pa…Check if you run itEPSS 0.40%Aug 11, 2026
- High7.1MongoDB Server's handling of a Queryable Encryption maintenance operation did not properly validate certain request parameters against the collection's encrypted field…Check if you run itEPSS 0.23%Aug 11, 2026
- High8.7Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges…Check if you run itEPSS 0.78%Aug 11, 2026
- High7.8Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally.Check if you run itEPSS 0.36%Aug 11, 2026
- High8.8CVE-2026-70326 is listed by Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network..Check if you run itEPSS 0.78%Aug 11, 2026
- High8.8CVE-2026-70324 is listed by Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network..Check if you run itEPSS 0.94%Aug 11, 2026
- High8.8CVE-2026-70321 is listed by Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network..Check if you run itEPSS 1.69%Aug 11, 2026
- High7.8Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.Check if you run itEPSS 0.47%Aug 11, 2026
- High7.8Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.Check if you run itEPSS 0.47%Aug 11, 2026
- High8.8CVE-2026-66808 is listed by Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network..Check if you run itEPSS 2.04%Aug 11, 2026
- High8.8Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.Check if you run itEPSS 2.04%Aug 11, 2026
- High8.8CVE-2026-65813 is listed by Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network..Check if you run itEPSS 0.94%Aug 11, 2026
- High7.8Incorrect authorization in Microsoft Entra Connect Sync allows an authorized attacker to elevate privileges over a network.Check if you run itEPSS 0.32%Aug 11, 2026
- High8.8CVE-2026-65665 is listed by Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network..Check if you run itEPSS 1.69%Aug 11, 2026
- High8.8CVE-2026-65663 is listed by Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network..Check if you run itEPSS 2.04%Aug 11, 2026
- High8.8CVE-2026-65658 is listed by Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network..Check if you run itEPSS 2.04%Aug 11, 2026
- Medium5.4CVE-2026-64922 is listed by inventory_critical.Check if you run itEPSS 0.58%Aug 11, 2026
- High8.8Missing authentication for critical function in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.Check if you run itEPSS 0.94%Aug 11, 2026
- Medium5.4CVE-2026-64916 is listed by inventory_critical.Check if you run itEPSS 0.58%Aug 11, 2026
- High7.8Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.Check if you run itEPSS 0.47%Aug 11, 2026
- Medium5.4CVE-2026-64902 is listed by inventory_critical.Check if you run itEPSS 0.58%Aug 11, 2026
Sort