Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownCVE-2026-105008 is listed by NCSC-2026-0423 [1.00] [M/H] Kwetsbaarheden verholpen in Microsoft Windows.Check if you run itEPSS 0.60%Oct 13, 2026
- Critical9.8Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.Check if you run itEPSS 0.89%Oct 13, 2026
- Critical9.8Heap-based buffer overflow in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.Check if you run itEPSS 0.96%Oct 13, 2026
- Critical9.8Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network.Check if you run itEPSS 1.00%Oct 13, 2026
- Critical9.8Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network.Check if you run itEPSS 1.00%Oct 13, 2026
- High7.8Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.32%Oct 13, 2026
- High7.0Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.25%Oct 13, 2026
- High8.1Improper verification of cryptographic signature in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network.Check if you run itEPSS 0.54%Oct 13, 2026
- Medium6.5Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.Check if you run itEPSS 0.77%Oct 13, 2026
- Medium4.6Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a networkCheck if you run itEPSS 0.36%Oct 13, 2026
- High8.8Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.Check if you run itEPSS 0.89%Oct 13, 2026
- High8.8Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.Check if you run itEPSS 0.70%Oct 13, 2026
- High8.8Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.Check if you run itEPSS 0.70%Oct 13, 2026
- High8.8Improper access control in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.Check if you run itEPSS 0.70%Oct 13, 2026
- Medium4.6Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a networkCheck if you run itEPSS 0.36%Oct 13, 2026
- Critical9.0Potential arbitrary code execution, under specific configurations.Check if you run itEPSS 0.34%Oct 13, 2026
- High7.2An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.…Check if you run itEPSS 0.31%Oct 13, 2026
- Medium6.5An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.…Check if you run itEPSS 0.25%Oct 13, 2026
- High7.2An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.…Check if you run itEPSS 0.31%Oct 13, 2026
- High8.8dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas.Check if you run itEPSS 0.29%Oct 13, 2026
- High8.8dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas.Check if you run itEPSS 0.34%Oct 13, 2026
- Critical9.4An Incorrect Privilege Assignment vulnerability in Docker Hub's account-to-organization conversion feature allowed an authenticated attacker to reassign a personal acc…Check if you run itEPSS 0.41%Oct 13, 2026
- High8.8An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.…Check if you run itEPSS 0.32%Oct 13, 2026
- High8.7A remote code execution vulnerability in ONLYOFFICE Document Server versions before10.0.0 allows an authenticated attacker with a valid Inbox-compatible JWT to execute…Check if you run itEPSS 1.04%Oct 13, 2026
- High7.8Hyland Desktop Host for Windows before 25.1.1 is vulnerable to local privilege escalation.Check if you run itEPSS 0.12%Oct 13, 2026