Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High8.2Externally controlled reference to a resource in another sphere in Microsoft Partner Center allows an unauthorized attacker to perform spoofing over a network.May 7, 2026
- Critical9.0Improper access control in Azure Managed Instance for Apache Cassandra allows an authorized attacker to execute code over a network.May 7, 2026
- Medium6.5Improper authorization in Microsoft Teams allows an authorized attacker to disclose information over a network.May 7, 2026
- High7.5Improper neutralization of special elements used in a command ('command injection') in Copilot Chat (Microsoft Edge) allows an unauthorized attacker to disclose inform…May 7, 2026
- Critical9.9Improper access control in Azure Managed Instance for Apache Cassandra allows an authorized attacker to execute code over a network.May 7, 2026
- Medium6.1Improper neutralization of input during web page generation ('cross-site scripting') in Azure Machine Learning allows an unauthorized attacker to perform spoofing over a network.May 7, 2026
- High7.5Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthorized attacker to disclose information over a network.May 7, 2026
- High7.5Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthorized attacker to disclose information over a network.May 7, 2026
- Medium5.3ParquetSharp is a .NET library for reading and writing Apache Parquet files.May 7, 2026
- High7.5The Dial and LookupPort functions panic on Windows when provided with an input containing a NUL (0).May 7, 2026
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in PluginUs.Net BEAR allows Cross Site Request Forgery.May 7, 2026
- Medium5.9OpenTelemetry.Exporter.OneCollector is a .NET exporter that sends telemetry to a OneCollector back-end over HTTP.May 6, 2026
- Medium5.9OpenTelemetry.Resources.Azure is the .NET resource detector for Azure environments.May 6, 2026
- Medium5.3OpenTelemetry.Exporter.Zipkin is the .NET Zipkin exporter for OpenTelemetry.May 6, 2026
- High8.8Integer overflow in Dawn in Google Chrome on Windows prior to 148.0.7778.96 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.May 6, 2026
- High7.5Race in Chromoting in Google Chrome on Windows prior to 148.0.7778.96 allowed a local attacker to perform privilege escalation via a malicious file.May 6, 2026
- High8.8Use after free in WebRTC in Google Chrome on Windows prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.May 6, 2026
- High7.8Use after free in Chromoting in Google Chrome on Windows prior to 148.0.7778.96 allowed a local attacker to perform OS-level privilege escalation via a malicious file.May 6, 2026
- High8.8Integer overflow in ANGLE in Google Chrome on Mac,Windows prior to 148.0.7778.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.May 6, 2026
- High8.4An Uncontrolled Search Path Element vulnerability in JohnsonControls AC2000 on Windows allows Leveraging/Manipulating Configuration File Search Paths.EPSS 0.1%May 6, 2026
- High8.5Uncontrolled Search Path Element vulnerability in WatchGuard Agent on Windows allows Using Malicious Files.May 6, 2026
- High8.5Use of Hard-coded Cryptographic Key vulnerability in WatchGuard Agent on Windows allows Inclusion of Code in Existing Process.May 6, 2026
- High7.1Stack-based Buffer Overflow vulnerability in the WatchGuard Agent discovery service on Windows allows Overflow Buffers.May 6, 2026
- High7.1Stack-based Buffer Overflow vulnerability in the WatchGuard Agent discovery service on Windows allows Overflow Buffers.May 6, 2026
- Medium5.4Sandboxie-Plus is an open source sandbox-based isolation software for Windows.May 5, 2026