Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5Out-of-bounds read in Web Threat Defense (WTD.sys) allows an unauthorized attacker to deny service over a network.Check this weekEPSS 66.74%May 13, 2025
- High7.8Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.53%May 13, 2025
- High7.5Time-of-check time-of-use (toctou) race condition in Windows Fundamentals allows an authorized attacker to execute code over a network.Check if you run itEPSS 1.16%May 13, 2025
- Medium6.5Improper input validation in Active Directory Certificate Services (AD CS) allows an authorized attacker to deny service over a network.Check if you run itEPSS 2.02%May 13, 2025
- High8.8Heap-based buffer overflow in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.Check if you run itEPSS 1.34%May 13, 2025
- High8.8Heap-based buffer overflow in Windows Remote Desktop allows an unauthorized attacker to execute code over a network.Check if you run itEPSS 1.43%May 13, 2025
- High8.8Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network.Check if you run itEPSS 1.09%May 13, 2025
- Medium6.5Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.Check if you run itEPSS 1.53%May 13, 2025
- Medium6.5Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.Check if you run itEPSS 1.53%May 13, 2025
- High7.0conda-forge openssl-feedstock before 066e83c (2024-05-20), on Microsoft Windows, configures OpenSSL to use an OPENSSLDIR file path that can be written to by non-privilged local useCheck if you run itEPSS 0.23%May 13, 2025
- Medium4.3SAP GUI for Windows allows an unauthenticated attacker to exploit insecure obfuscation algorithms used by the GuiXT application to store user credentials.Check if you run itEPSS 0.18%May 13, 2025
- High7.8Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free VulnerabilityPatch nowKEVEPSS 1.82%May 13, 2025
- High7.8Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow VulnerabilityPatch nowKEVEPSS 2.33%May 13, 2025
- High7.8Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free VulnerabilityPatch nowKEVEPSS 1.42%May 13, 2025
- High7.8Microsoft Windows DWM Core Library Use-After-Free VulnerabilityPatch nowKEVEPSS 1.92%May 13, 2025
- High7.5Microsoft Windows Scripting Engine Type Confusion VulnerabilityPatch nowKEVEPSS 27.04%May 13, 2025
- High7.3A vulnerability was found in MTSoftware C-Lodop 6.6.1.1 on Windows.Check if you run itEPSS 0.34%May 11, 2025
- High7.3A vulnerability, which was classified as critical, has been found in Discord 1.0.9188 on Windows.Check if you run itEPSS 0.35%May 10, 2025
- High7.8Link Following Local Privilege Escalation Vulnerability in System Speedup Service in Avira Operations GmbH Avira Prime Version 1.1.96.2 on Windows 10 x64 allows local attackers toCheck this weekEPSS 22.00%May 9, 2025
- High7.8Link Following Local Privilege Escalation Vulnerability in TuneupSvc in Avast Cleanup Premium Version 24.2.16593.17810 on Windows 10 Pro x64 allows local attackers to escalate privCheck this weekEPSS 17.00%May 9, 2025
- High7.8Link Following Local Privilege Escalation Vulnerability in TuneUp Service in AVG TuneUp Version 23.4 (build 15592) on Windows 10 allows local attackers to escalate privileges and eCheck this weekEPSS 17.00%May 9, 2025
- High7.8Link Following Local Privilege Escalation Vulnerability in TuneupSvc.exe in AVG TuneUp 24.2.16593.9844 on Windows allows local attackers to escalate privileges and execute arbitrarCheck this weekEPSS 22.00%May 9, 2025
- High7.8Local Privilege Escalation in Avira.Spotlight.Service.exe in Avira Prime 1.1.96.2 on Windows 10 x64 allows local attackers to gain system-level privileges via arbitrary file deletiCheck this weekEPSS 23.00%May 9, 2025
- High7.8Link Following Local Privilege Escalation Vulnerability in NortonUtilitiesSvc in Norton Utilities Ultimate Version 24.2.16862.6344 on Windows 10 Pro x64 allows local attackers to eCheck this weekEPSS 17.00%May 9, 2025
- Low1.1Terraform WinDNS Provider allows users to manage their Windows DNS server resources through Terraform.Check if you run itEPSS 0.56%May 6, 2025