Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5Microsoft Windows Information Disclosure VulnerabilityPatch nowKEVEPSS 7.46%Jan 13, 2026
- Critical9.9Sandboxie is a sandbox-based isolation software for 32-bit and 64-bit Windows NT-based operating systems.Check if you run itEPSS 0.72%Dec 11, 2025
- High7.8An issue was discovered in Foxit PDF and Editor for Windows and macOS before 13.2 and 2025 before 2025.2.Check if you run itEPSS 0.20%Dec 11, 2025
- High7.8An issue was discovered in Foxit PDF and Editor for Windows and macOS before 13.2 and 2025 before 2025.2.Check if you run itEPSS 0.18%Dec 11, 2025
- High7.8An issue was discovered in Foxit PDF and Editor for Windows before 13.2 and 2025 before 2025.2.Check if you run itEPSS 0.15%Dec 11, 2025
- Medium6.5An issue was discovered in Foxit PDF and Editor for Windows and macOS before 13.2 and 2025 before 2025.2.Check if you run itEPSS 0.20%Dec 11, 2025
- High7.3An issue was discovered in Foxit PDF and Editor for Windows and macOS before 13.2 and 2025 before 2025.2.Check if you run itEPSS 0.12%Dec 11, 2025
- Medium6.7An issue was discovered in Foxit PDF and Editor for Windows and macOS before 13.2 and 2025 before 2025.2.Check if you run itEPSS 0.14%Dec 11, 2025
- Medium6.7An issue was discovered in Foxit PDF and Editor for Windows before 13.2 and 2025 before 2025.2.Check if you run itEPSS 0.14%Dec 11, 2025
- Low3.3An issue was discovered in Foxit PDF and Editor for Windows before 13.2 and 2025 before 2025.2.Check if you run itEPSS 0.18%Dec 11, 2025
- High7.8Out-of-bounds read in Application Information Services allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.40%Dec 9, 2025
- Medium5.5Improper access control in Windows Camera Frame Server Monitor allows an authorized attacker to disclose information locally.Check if you run itEPSS 0.40%Dec 9, 2025
- High7.0Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.33%Dec 9, 2025
- High7.0Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Brokering File System allows an authorized attacker to elevate…Check if you run itEPSS 0.25%Dec 9, 2025
- High7.8Microsoft Windows Use After Free VulnerabilityPatch nowKEVEPSS 2.50%Dec 9, 2025
- Medium6.2Protection Mechanism Failure vulnerability in ESTsoft ALZip on Windows allows SmartScreen bypass.This issue affects ALZip: from 12.01 before 12.29.Open the advisoryDec 3, 2025
- Unknownprocess: command injection via argument list on WindowsCheck if you run itEPSS 6.83%Nov 14, 2025
- High7.8Microsoft Windows Link Following VulnerabilityPatch nowKEVEPSS 4.61%Nov 11, 2025
- High7.0Microsoft Windows Race Condition VulnerabilityPatch nowKEVEPSS 4.46%Nov 11, 2025
- UnknownMicrosoft Windows User Interface (UI) Misrepresentation of Critical InformationPatch nowKEVEPSS 73.03%Oct 30, 2025
- UnknownVanDyke Software VShell for Windows Trigger Action Script VulnerabilityPatch nowKEVEPSS 31.89%Oct 20, 2025
- Critical9.8Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 99.98%Oct 14, 2025
- High7.8Microsoft Windows Improper Access Control VulnerabilityPatch nowKEVEPSS 2.66%Oct 14, 2025
- High7.8Microsoft Windows Untrusted Pointer Dereference VulnerabilityPatch nowKEVEPSS 6.37%Oct 14, 2025
- High7.8NAVER MYBOX Explorer for Windows before 3.0.8.133 allows a local attacker to escalate privileges to NT AUTHORITY\SYSTEM by invoking arbitrary DLLs due to improper privilege checks.Open the advisoryAug 28, 2025