Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High7.0Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.May 12, 2026
- High7.8Double free in Windows Message Queuing allows an authorized attacker to elevate privileges locally.May 12, 2026
- High7.8Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.May 12, 2026
- High7.8Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.May 12, 2026
- High7.8Improper access control in Windows Event Logging Service allows an authorized attacker to elevate privileges locally.May 12, 2026
- High8.2Improper neutralization of special elements in output used by a downstream component ('injection') in Azure Machine Learning allows an unauthorized attacker to perform…May 12, 2026
- Critical9.9Improper privilege management in Microsoft Dynamics 365 Customer Insights allows an authorized attacker to elevate privileges over a network.May 12, 2026
- Critical9.1The Java Key Vault Keys library in the Azure SDK for Java contains an issue in the local cryptographic verification path where authentication tag comparison was implem…May 12, 2026
- High8.8Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.May 12, 2026
- High8.8Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.May 12, 2026
- Medium4.4Improper access control in Windows Filtering Platform (WFP) allows an authorized attacker to bypass a security feature locally.May 12, 2026
- High7.8External control of file name or path in Azure Monitor Agent allows an authorized attacker to elevate privileges locally.May 12, 2026
- Medium5.5Files or directories accessible to external parties in Microsoft Teams allows an unauthorized attacker to perform spoofing locally.May 12, 2026
- High7.3Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally.May 12, 2026
- Medium4.3A tampering vulnerability exists when .NET Core improperly handles specially crafted files.May 12, 2026
- Medium6.7Double free in Windows Rich Text Edit allows an authorized attacker to elevate privileges locally.May 12, 2026
- High7.5Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Native WiFi Miniport Driver allows an unauthorized attacker to e…May 12, 2026
- Medium6.7Double free in Windows Rich Text Edit allows an authorized attacker to elevate privileges locally.EPSS 0.3%May 12, 2026
- High8.5Improper input validation for some Intel(R) QAT software drivers for Windows before version 1.13 within Ring 3: User Applications may allow an escalation of privilege.EPSS 0.1%May 12, 2026
- High8.5Out-of-bounds write for some Intel(R) QAT software drivers for Windows before version 1.13 within Ring 3: User Applications may allow a escalation of privilege.EPSS 0.1%May 12, 2026
- Medium6.8Null pointer dereference for some Intel(R) QAT software drivers for Windows before version 2.6.0 within Ring 3: User Applications may allow a denial of service.EPSS 0.1%May 12, 2026
- Medium6.9Improper input validation for some Intel(R) QAT software drivers for Windows before version 2.6 within Ring 3: User Applications may allow a denial of service.EPSS 0.1%May 12, 2026
- Medium6.8Divide by zero for some Intel(R) QAT software drivers for Windows before version 1.13 within Ring 3: User Applications may allow a denial of service.EPSS 0.1%May 12, 2026
- Medium4.8Unchecked return value for some Intel(R) QAT software drivers for Windows before version 1.13 within Ring 3: User Applications may allow a denial of service.EPSS 0.1%May 12, 2026
- Medium6.9Buffer overflow for some Intel(R) QAT software drivers for Windows before version 1.13 within Ring 3: User Applications may allow a denial of service.EPSS 0.1%May 12, 2026