Catalog

Findings

Filter the merged record by severity, source, stack, and weakness type.

SearchSeveritySourceStackWeaknessSort

Known exploited only

UnknownGitea's web attachment handler skips its cross-repository ownership check for attachments created before 16 January 2026 and checks permissions against the repository…CVE-2026-78433 · CVE.org · NIST NVDOct 14, 2026
Medium4.3GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.11 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditio…CVE-2026-14210 · gitlab · gitlab · CVE.org · NIST NVDOct 13, 2026
High7.8Microsoft Active Directory Federation Services Insufficient Granularity of Access Control VulnerabilityCVE-2026-56155 · Microsoft · Active Directory Federation Services · CISA KEV · CVE.org · FIRST EPSS · microsoftKEVEPSS 0.3%Jul 14, 2026
High7.8Microsoft Defender Insufficient Granularity of Access Control VulnerabilityCVE-2026-33825 · Microsoft · Defender · CISA KEV · CVE.org · FIRST EPSS · microsoftKEVEPSS 0.4%Apr 14, 2026
Critical9.8Apple Multiple Products Arbitrary Read and Write VulnerabilityCVE-2025-31201 · apple · macos · CISA KEV · CVE.org · FIRST EPSS · ios, macosKEVEPSS 14.0%Apr 16, 2025
High7.8Microsoft Windows SAM Local Privilege Escalation VulnerabilityCVE-2021-36934 · microsoft · windows 10 1809 · CISA KEV · CVE.org · FIRST EPSS · microsoftKEVEPSS 67.3%Jul 22, 2021