Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownCVE-2026-0298 GlobalProtect App: Code Execution Vulnerability in Windows Pre-Logon Access Provider (PLAP) (Severity: MEDIUM)Check if you run itEPSS 0.33%Sep 12, 2026
- UnknownImproper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 1.61%Sep 10, 2026
- UnknownCVE-2026-0306 Prisma Access Agent: EndPoint DLP Bypass Vulnerability on Windows (Severity: MEDIUM)Check if you run itEPSS 0.10%Sep 9, 2026
- High7.0Use after free in Windows Security App allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.26%Sep 8, 2026
- High7.8ZDI-26-617: Microsoft Windows MIDI Service Incorrect Permission Assignment Local Privilege Escalation VulnerabilityCheck if you run itEPSS 0.30%Sep 8, 2026
- High8.1ZDI-26-622: Microsoft Windows IKEv2 AES-GCM Decryption Integer Underflow Remote Code Execution VulnerabilityCheck if you run itEPSS 1.17%Sep 8, 2026
- High7.8Microsoft Windows Heap-Based Buffer Overflow VulnerabilityPatch nowKEVEPSS 3.62%Sep 8, 2026
- High7.8Microsoft Windows Link Following VulnerabilityPatch nowKEVEPSS 0.39%Sep 8, 2026
- Medium6.8MOOS-IvP through 24.8.1 fails to properly validate variable names extracted from alog files in the SplitHandler, allowing attackers to write files outside the split directory.Check if you run itEPSS 0.23%Sep 3, 2026
- Critical9.8ZDI-26-651: (Pwn2Own) OpenAI Codex External Control of System or Configuration Setting Remote Code Execution VulnerabilityCheck if you run itEPSS 0.37%Sep 1, 2026
- High8.5RustDesk's Windows clipboard redirection copies a peer-supplied length into a fixed-size caller buffer without an upper bound check.Check if you run itEPSS 0.43%Aug 24, 2026
- High7.8A local privilege escalation vulnerability exists in the Restricted Access (Kiosk) Mode implementation of Scheidt & Bachmann entervo HMI prior to V2 R5 P0 M5.Check if you run itEPSS 0.17%Aug 24, 2026
- High7.0ZDI-26-606: Microsoft Windows Compatibility Appraiser Link Following Local Privilege Escalation VulnerabilityOpen the advisoryAug 24, 2026
- Low3.3ZDI-26-605: Microsoft Windows Localized Filenames Improper Input Validation NTLM Response Information Disclosure VulnerabilityCheck if you run itEPSS 0.92%Aug 24, 2026
- High7.4Git for Windows is the Windows port of Git.Check if you run itEPSS 0.46%Aug 21, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: cxl/region: Block region delete during region creation Expand the range lock, rename it "regions_lo…Check if you run itEPSS 0.21%Aug 15, 2026
- High8.8Stack-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.Check if you run itEPSS 0.82%Aug 11, 2026
- Medium6.7Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.35%Aug 11, 2026
- High7.8ZDI-26-621: Microsoft Windows UMPDDrvRealizeBrush Improper Object Management Local Privilege Escalation VulnerabilityCheck if you run itEPSS 0.33%Aug 11, 2026
- Medium5.2Npcap driver installed without administrator-only access restriction on Windows in Arc before v2.7.0Check if you run itEPSS 0.13%Aug 11, 2026
- High7.0Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free VulnerabilityPatch nowKEVEPSS 0.33%Aug 11, 2026
- Unknownkubectl cp path traversal on Windows allows arbitrary file writesCheck if you run itEPSS 0.20%Aug 10, 2026
- UnknownMicrosoft Windows Group Policy Elevation of Privilege VulnerabilityPatch nowKEVEPSS 6.40%Jul 30, 2026
- Unknowneclipse jetty Improper Access ControlPatch nowKEVEPSS 6.36%Jul 20, 2026
- High7.0Use after free in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.26%Jul 14, 2026