Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5Exposure of sensitive information to an unauthorized actor in Azure Data Factory allows an unauthorized attacker to disclose information over a network.Check if you run itEPSS 0.82%Mar 19, 2026
- Critical9.8Insufficiently protected credentials in Azure DevOps allows an unauthorized attacker to elevate privileges over a network.Check if you run itEPSS 0.81%Mar 19, 2026
- High7.5ASP.NET Core Kestrel in Microsoft .NET 8.0 before 8.0.22 and .NET 9.0 before 9.0.11 allows a remote attacker to cause excessive CPU consumption by sending a crafted QU…Check if you run itEPSS 4.34%Mar 19, 2026
- High8.8Microsoft Dynamics 365 Customer Engagement (on-premises) 1612 (9.0.2.3034) allows the generation of customized reports via raw SQL queries in an upload of a .rdl (Repo…Check if you run itEPSS 0.48%Mar 18, 2026
- Medium5.3The Post SMTP plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the function in all versions up to, and incl…Check if you run itEPSS 0.35%Mar 18, 2026
- High7.1AI command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network.Check if you run itEPSS 0.56%Mar 16, 2026
- Medium5.0Microsoft Edge (Chromium-based) for Android Spoofing VulnerabilityCheck if you run itEPSS 0.24%Mar 16, 2026
- High8.8Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer VulnerabilityPatch nowKEVEPSS 1.07%Mar 12, 2026
- High7.8Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune.Check if you run itEPSS 0.19%Mar 11, 2026
- Critical10.0Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune.Check if you run itEPSS 0.76%Mar 11, 2026
- High8.8In Microsoft DirectX End-User Runtime Web Installer 9.29.1974.0, a low-privilege user can replace an executable file during the installation process, which may result…Check if you run itEPSS 0.13%Mar 11, 2026
- Medium5.5Cwe is not in rca categories in Microsoft Authenticator allows an unauthorized attacker to disclose information locally.Check if you run itEPSS 0.56%Mar 10, 2026
- High8.1External initialization of trusted variables or data stores in Azure Entra ID allows an unauthorized attacker to elevate privileges locally.Check if you run itEPSS 0.30%Mar 10, 2026
- Medium4.7Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office Excel allows an unauthorized attacker to disclose information…Check if you run itEPSS 0.80%Mar 10, 2026
- High7.8Improper authentication in Azure Arc allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.31%Mar 10, 2026
- High7.8Integer overflow or wraparound in Microsoft Office allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.35%Mar 10, 2026
- High7.8Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.35%Mar 10, 2026
- High7.8Incorrect default permissions in .NET allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.31%Mar 10, 2026
- High7.5Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.Check if you run itEPSS 2.54%Mar 10, 2026
- High7.8Improper authentication in Windows SMB Server allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.39%Mar 10, 2026
- High7.5Out-of-bounds read in .NET allows an unauthorized attacker to deny service over a network.Patch nowKEVEPSS 1.22%Mar 10, 2026
- High7.5Server-side request forgery (ssrf) in Azure IoT Explorer allows an unauthorized attacker to perform spoofing over a network.Check if you run itEPSS 1.06%Mar 10, 2026
- High8.8Server-side request forgery (ssrf) in Azure MCP Server allows an authorized attacker to elevate privileges over a network.Check if you run itEPSS 0.89%Mar 10, 2026
- High7.8Authentication bypass using an alternate path or channel in Azure Windows Virtual Machine Agent allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.31%Mar 10, 2026
- High8.8Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.Check if you run itEPSS 1.03%Mar 10, 2026