Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.4FreeRDP 3.0.0 before 3.32.0 contains an improper certificate validation vulnerability in freerdp_http_request() in libfreerdp/utils/http.c that completes TLS handshake…Check if you run itEPSS 0.19%Oct 12, 2026
- UnknownMalicious code in agent-vx (PyPI)Open the advisoryOct 10, 2026
- Critical10.0Improper certificate validation in Microsoft Partner Center allows an unauthorized attacker to elevate privileges over a network.Check if you run itEPSS 0.47%Oct 8, 2026
- Critical9.8Deserialization of untrusted data in Microsoft Dataverse allows an unauthorized attacker to execute code over a network.Check if you run itEPSS 0.82%Oct 8, 2026
- Medium6.5Missing authorization in Azure Event Grid allows an authorized attacker to perform spoofing over a network.Check if you run itEPSS 0.36%Oct 8, 2026
- High8.1Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network.Check if you run itEPSS 0.38%Oct 8, 2026
- Critical9.8IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to a buffer overrun in the TDS (Microsoft SQL Server) PRELOGIN packet decoder.Check if you run itEPSS 0.37%Oct 8, 2026
- High8.7Exposure of sensitive information to an unauthorized actor in Azure API Center allows an unauthorized attacker to disclose information over a network.Check if you run itEPSS 0.38%Oct 8, 2026
- UnknownCVE-2026-91799 is listed by Microsoft, Adobe, Apple, and Foxit vulnerabilities.Check if you run itEPSS 0.13%Oct 7, 2026
- UnknownCVE-2026-80093 is listed by Microsoft, Adobe, Apple, and Foxit vulnerabilities.Check if you run itEPSS 0.32%Oct 7, 2026
- UnknownCVE-2026-58613 is listed by Microsoft, Adobe, Apple, and Foxit vulnerabilities.Check if you run itEPSS 0.38%Oct 7, 2026
- UnknownCVE-2026-50475 is listed by Microsoft, Adobe, Apple, and Foxit vulnerabilities.Check if you run itEPSS 0.38%Oct 7, 2026
- UnknownCVE-2026-49177 is listed by Microsoft, Adobe, Apple, and Foxit vulnerabilities.Check if you run itEPSS 0.44%Oct 7, 2026
- UnknownCVE-2026-48388 is listed by Microsoft, Adobe, Apple, and Foxit vulnerabilities.Check if you run itEPSS 0.30%Oct 7, 2026
- High8.8Weak authentication in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.Check if you run itEPSS 0.48%Oct 2, 2026
- High8.8ZDI-26-751: Microsoft Windows dxgkrnl Time-Of-Check Time-Of-Use Local Privilege Escalation VulnerabilityCheck if you run itEPSS 0.29%Oct 1, 2026
- UnknownImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.46%Sep 29, 2026
- High8.6Microsoft 365 Copilot Business Chat Information Disclosure VulnerabilityCheck if you run itEPSS 0.54%Sep 17, 2026
- Medium6.1Ai command injection in Microsoft Copilot allows an unauthorized attacker to disclose information over a network.Check if you run itEPSS 0.39%Sep 17, 2026
- Medium5.3ZDI-26-708: (0Day) Microsoft Windows HTTP Proxy Privilege Escalation VulnerabilityOpen the advisorySep 16, 2026
- UnknownImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.38%Sep 15, 2026
- Medium5.8ZDI-26-629: Microsoft Azure Entra ID OAuth Device Code Grant Information Disclosure VulnerabilityOpen the advisorySep 9, 2026
- High7.0Use after free in Windows Security App allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.26%Sep 8, 2026
- High7.5Microsoft.OpenApi.YamlReader vulnerable to denial of service via YAML alias expansionCheck if you run itEPSS 1.90%Sep 8, 2026
- High7.8ZDI-26-617: Microsoft Windows MIDI Service Incorrect Permission Assignment Local Privilege Escalation VulnerabilityCheck if you run itEPSS 0.30%Sep 8, 2026