Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.9Multiple local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app allow a local user to escalate their privileges to NT AUTHORITY\SYSTEM…Check if you run itEPSS 0.18%May 13, 2026
- Medium4.9Multiple improper certificate validation vulnerabilities in the Palo Alto Networks GlobalProtect™ app enables an attacker to intercept encrypted communications and pot…Check if you run itEPSS 0.11%May 13, 2026
- Medium6.2An improper certificate validation vulnerability in the Prisma Access Agent® for Android and Chrome OS enables an attacker to perform a man-in-the-middle (MitM) attack…Check if you run itEPSS 0.19%May 13, 2026
- Medium5.9A vulnerability with a privilege management mechanism in the Palo Alto Networks Prisma Access Agent® enables a locally authenticated non-administrative user to escalat…Check if you run itEPSS 0.15%May 13, 2026
- High8.5The Claude Desktop app gives you Claude Code with a graphical interface built for running multiple sessions side by side.Check if you run itEPSS 0.16%May 13, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated Explicitly set/clear CR8 writ…Check if you run itEPSS 0.16%May 13, 2026
- Medium5.2Privilege escalation in the mk_mysql agent plugin on Windows in Checkmk <2.4.0p29, <2.3.0p47, and 2.2.0 (EOL) allows a local unprivileged user able to create a Windows…Check if you run itEPSS 0.12%May 13, 2026
- High8.4Bytello Share (Windows Edition) installer executable provided by Bytello insecurely loads Dynamic Link Libraries.Check if you run itEPSS 0.18%May 13, 2026
- High8.7Mako is a template library written in Python.Check if you run itEPSS 0.89%May 12, 2026
- Medium5.5A use of hard-coded cryptographic key vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.2, FortiClientWindows 7.2 all versions may allow attacker to infor…Check if you run itEPSS 0.14%May 12, 2026
- High7.8Integer overflow or wraparound in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.33%May 12, 2026
- High7.0Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.26%May 12, 2026
- High7.7Xibo is an open source digital signage platform with a web content management system and Windows display player software.Check if you run itEPSS 0.42%May 12, 2026
- Medium6.7Reliance on a component that is not updateable in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.Check if you run itEPSS 2.23%May 12, 2026
- Critical9.8Heap-based buffer overflow in Microsoft Windows DNS allows an unauthorized attacker to execute code over a network.Check if you run itEPSS 0.97%May 12, 2026
- High7.8Use after free in Data Deduplication allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.33%May 12, 2026
- Critical9.8Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network.Patch nowKEVEPSS 0.97%May 12, 2026
- High7.8Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.36%May 12, 2026
- High8.8Improper access control in Windows Admin Center allows an authorized attacker to elevate privileges over a network.Check if you run itEPSS 0.78%May 12, 2026
- High8.1Use after free in Windows TCP/IP allows an unauthorized attacker to execute code over a network.Check if you run itEPSS 0.71%May 12, 2026
- High7.4Windows TCP/IP Denial of Service VulnerabilityCheck if you run itEPSS 0.58%May 12, 2026
- High7.4Windows TCP/IP Denial of Service VulnerabilityCheck if you run itEPSS 0.58%May 12, 2026
- High7.0Use after free in Windows SMB Client allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.26%May 12, 2026
- High7.8Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.33%May 12, 2026
- High7.8Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.33%May 12, 2026