Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8A Dynamic-link Library Injection vulnerability in GatewayGeo MapServer for Windows version 5 allows attackers to escalate privileges via a crafted executable.Check if you run itEPSS 0.19%Apr 9, 2026
- Medium6.5Incorrect security UI in Permissions in Google Chrome on Windows prior to 147.0.7727.55 allowed a remote attacker to perform domain spoofing via a crafted HTML page.Check if you run itEPSS 0.29%Apr 8, 2026
- Critical9.8A heap-based buffer overflow vulnerability exists in the lossless_jpeg_load_raw functionality of LibRaw Commit 0b56545 and Commit d20315b.Check if you run itEPSS 1.38%Apr 7, 2026
- Medium6.1SymCrypt is the core cryptographic function library currently used by Windows.Check if you run itEPSS 0.35%Apr 6, 2026
- Critical9.6The Stackfield Desktop App before 1.10.2 for macOS and Windows contains a path traversal vulnerability in certain decryption functionality when processing the filePath property.Check if you run itEPSS 0.59%Apr 3, 2026
- Medium5.6Incorrect Default Permissions vulnerability in AIRBUS PSS TETRA Connectivity Server on Windows Server OS allows Privilege Abuse.Check if you run itEPSS 0.14%Apr 3, 2026
- Medium6.9OpenClaw before 2026.3.22 contains a path traversal vulnerability in Windows media loaders that accepts remote-host file URLs and UNC-style paths before local-path validation.Check if you run itEPSS 0.46%Apr 1, 2026
- Medium6.5XML Notepad is a Windows program that provides a simple intuitive User Interface for browsing and editing XML documents.Check if you run itEPSS 1.39%Mar 31, 2026
- High8.6A security audit identified a privilege escalation vulnerability in Operations Agent(<=OA 12.29) on Windows.Check if you run itEPSS 0.10%Mar 31, 2026
- Medium5.3An incorrect startup configuration of affected versions of Zscaler Client Connector on Windows may cause a limited amount of traffic from being inspected under rare circumstances.Check if you run itEPSS 0.18%Mar 31, 2026
- High7.0Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Thales Sentinel LDK Runtime on Windows allows Stored XSS.Check if you run itEPSS 0.18%Mar 27, 2026
- High8.5The installer of RATOC RAID Monitoring Manager for Windows allows to customize the installation folder.Check if you run itEPSS 0.15%Mar 26, 2026
- High8.4The installer of RATOC RAID Monitoring Manager for Windows searches the current directory to load certain DLLs.Check if you run itEPSS 0.18%Mar 26, 2026
- UnknownMicrosoft Windows Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 95.99%Mar 23, 2026
- Medium6.5Greenshot is an open source Windows screenshot utility.Check if you run itEPSS 0.21%Mar 20, 2026
- High8.8Integer overflow in ANGLE in Google Chrome on Windows prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.Check if you run itEPSS 0.26%Mar 20, 2026
- Medium6.7Netskope was notified about a potential gap in its Endpoint DLP Module for Netskope Client on Windows systems.Check if you run itEPSS 0.17%Mar 17, 2026
- Medium6.8Netskope was notified about a potential gap in its Endpoint DLP Module for Netskope Client on Windows systems.Check if you run itEPSS 0.11%Mar 17, 2026
- Medium4.8Improper Neutralization of Input During Web Page Generation in Forcepoint Web Security (On-Prem) on Windows allows Stored XSS.This issue affects Web Security through 8.5.6.Check if you run itEPSS 0.17%Mar 16, 2026
- High8.4A DLL search order hijacking vulnerability in Thermalright TR-VISION HOME on Windows (64-bit) allows a local attacker to escalate privileges via DLL side-loading.Check if you run itEPSS 0.21%Mar 16, 2026
- UnknownRisk of Buffer Overflow Vulnerability when installed from source on Windows R < 4.2Open the advisoryMar 13, 2026
- High8.8A vulnerability allowing local privilege escalation on Windows-based Veeam Backup & Replication servers.Check if you run itEPSS 0.23%Mar 12, 2026
- Medium6.9R 3.4.4 on Windows x64 contains a buffer overflow vulnerability in the GUI Preferences language menu field that allows local attackers to bypass DEP and ASLR protections.Check if you run itEPSS 0.12%Mar 11, 2026
- High7.8Improper Privilege Management in certain Zoom Clients for Windows may allow an authenticated user to conduct an escalation of privilege via local access.Check if you run itEPSS 0.15%Mar 11, 2026
- High7.8Improper Input Validation in Zoom Rooms for Windows before 6.6.5 in Kiosk Mode may allow an authenticated user to conduct an escalation of privilege via local access.Check if you run itEPSS 0.15%Mar 11, 2026