Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8Windows SmartScreen Security Feature Bypass VulnerabilityCheck if you run itEPSS 0.88%Oct 13, 2026
- High7.8Microsoft Windows Search Component Elevation of Privilege VulnerabilityCheck if you run itEPSS 0.32%Oct 13, 2026
- High7.0Windows Backup Engine Elevation of Privilege VulnerabilityCheck if you run itEPSS 0.27%Oct 13, 2026
- High7.0Windows Autopilot Elevation of Privilege VulnerabilityCheck if you run itEPSS 0.25%Oct 13, 2026
- High7.8Windows Modern Device Management (MDM) Elevation of Privilege VulnerabilityCheck if you run itEPSS 0.32%Oct 13, 2026
- High7.0Windows Kerberos Elevation of Privilege VulnerabilityCheck if you run itEPSS 0.25%Oct 13, 2026
- High7.5Active Directory Federation Services (AD FS) Spoofing VulnerabilityCheck if you run itEPSS 0.74%Oct 13, 2026
- High7.8Affected Microsoft products: Windows 11 Version 26H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for x64-based Systems, WindowsCheck if you run itEPSS 0.33%Oct 13, 2026
- Medium6.5Affected Microsoft products: Windows Server 2016 (Server Core installation), Windows Server 2019 (Server Core installation), Windows Server 2012, Windows 10 Version 21…Check if you run itEPSS 0.95%Oct 13, 2026
- Medium6.5Affected Microsoft products: Windows 10 Version 21H2 for 32-bit Systems, Windows Server 2019 (Server Core installation), Windows 10 Version 1607 for 32-bit Systems, Wi…Check if you run itEPSS 0.95%Oct 13, 2026
- Medium6.5Affected Microsoft products: Windows 10 Version 22H2 for ARM64-based Systems, Windows Server 2025, Windows 11 Version 26H1 for ARM64-based Systems, Windows Server 2019…Check if you run itEPSS 0.95%Oct 13, 2026
- High7.4Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.Check if you run itEPSS 0.84%Oct 13, 2026
- High7.8Improper link resolution before file access ('link following') in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.34%Oct 13, 2026
- High8.8Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.Check if you run itEPSS 0.79%Oct 13, 2026
- High8.8Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.Check if you run itEPSS 0.82%Oct 13, 2026
- High8.8Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.Check if you run itEPSS 0.82%Oct 13, 2026
- High8.8Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.Check if you run itEPSS 0.82%Oct 13, 2026
- Low3.7fastify vulnerable to header validation bypass via case-sensitive propertyNamesCheck if you run itEPSS 0.26%Oct 13, 2026
- Medium4.7A flaw was found in the clevis PKCS#11 pin.Check if you run itEPSS 0.10%Oct 13, 2026
- Medium5.9A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux.Check if you run itEPSS 0.37%Oct 13, 2026
- UnknownMitigation bypass in the File Handling component.Check if you run itEPSS 0.16%Oct 13, 2026
- Medium6.5Denial-of-service in the Printing: Output component.Check if you run itEPSS 0.25%Oct 13, 2026
- UnknownRace condition in the XPCOM component.Check if you run itEPSS 0.14%Oct 13, 2026
- Medium6.5Denial-of-service in the WebRTC component.Check if you run itEPSS 0.25%Oct 13, 2026
- Medium4.3Information disclosure in the Networking component.Check if you run itEPSS 0.21%Oct 13, 2026