Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8Improper access control in Windows Admin Center allows an authorized attacker to elevate privileges over a network.Check if you run itEPSS 0.37%May 20, 2026
- Medium6.8Microsoft is aware of a security feature bypass vulnerability in Windows publicly referred to as "YellowKey".Check if you run itEPSS 0.49%May 20, 2026
- High7.5Microsoft Defender Denial of Service VulnerabilityPatch nowKEVEPSS 1.27%May 19, 2026
- High7.8Microsoft Defender Link Following VulnerabilityPatch nowKEVEPSS 0.44%May 19, 2026
- UnknownSonicWall SonicOS Authentication Bypass by Primary WeaknessPatch nowKEVEPSS 0.49%May 19, 2026
- UnknownWindows Cloud Files Mini Filter Driver Elevation of Privilege VulnerabilityPatch nowKEVEPSS 22.15%May 19, 2026
- Critical9.8Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityCheck if you run itEPSS 0.99%May 18, 2026
- Medium6.1Microsoft Edge (Chromium-based) Spoofing VulnerabilityCheck if you run itEPSS 0.30%May 18, 2026
- Medium5.4Improper input validation in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network.Check if you run itEPSS 0.41%May 18, 2026
- Critical10.0Improper authentication in Azure Local Disconnected Operations allows an unauthorized attacker to elevate privileges over a network.Check if you run itEPSS 0.90%May 18, 2026
- Medium5.5Microsoft APM is an open-source, community-driven dependency manager for AI agents.Check if you run itEPSS 0.90%May 15, 2026
- High7.4Microsoft APM is an open-source, community-driven dependency manager for AI agents.Check if you run itEPSS 1.06%May 15, 2026
- High7.1Microsoft APM is an open-source, community-driven dependency manager for AI agents.Check if you run itEPSS 0.53%May 15, 2026
- High8.2Fleet is open source device management software.Check if you run itEPSS 0.38%May 14, 2026
- High7.4Exposure of sensitive information to an unauthorized actor in Microsoft Authenticator allows an unauthorized attacker to disclose information over a network.Check if you run itEPSS 1.07%May 14, 2026
- High7.0The RedirectHandler middleware in microsoft/kiota-java (com.microsoft.kiota:microsoft-kiota-http-okHttp v1.9.0) and other Kiota libraries fails to strip sensitive HTTP…Check if you run itEPSS 0.94%May 14, 2026
- Medium6.1Microsoft Exchange Server Cross-Site Scripting VulnerabilityPatch nowKEVEPSS 0.52%May 14, 2026
- High7.5Loop with unreachable exit condition ('infinite loop') in ASP.NET Core allows an unauthorized attacker to deny service over a network.Check if you run itEPSS 2.44%May 12, 2026
- Critical9.9Improper control of generation of code ('code injection') in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to execute code over a network.Check if you run itEPSS 0.99%May 12, 2026
- High7.8Integer overflow or wraparound in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.33%May 12, 2026
- High7.5Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthorized attacker to perform tampering over a network.Check if you run itEPSS 0.71%May 12, 2026
- Medium6.5User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.Check if you run itEPSS 0.47%May 12, 2026
- Medium5.4Improper neutralization of special elements in output used by a downstream component ('injection') in Microsoft Edge (Chromium-based) allows an unauthorized attacker t…Check if you run itEPSS 0.41%May 12, 2026
- Critical9.1Improper control of generation of code ('code injection') in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to execute code over a network.Check if you run itEPSS 0.93%May 12, 2026
- Medium5.5Improper access control in Microsoft Office allows an unauthorized attacker to perform spoofing locally.Check if you run itEPSS 0.31%May 12, 2026