Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- Medium4.3User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.EPSS 0.7%Apr 10, 2026
- Medium5.4User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.EPSS 0.4%Apr 10, 2026
- Medium6.9OpenClaw before 2026.3.25 contains an authorization bypass vulnerability in Microsoft Teams feedback invokes that allows unauthorized senders to record session feedback.EPSS 0.4%Apr 10, 2026
- Medium6.8The installer certificate files in the …/bootstrap/common/ssl folder do not seem to have restricted permissions on Windows systems (users have read and execute access).EPSS 0.1%Apr 10, 2026
- High8.8A Dynamic-link Library Injection vulnerability in GatewayGeo MapServer for Windows version 5 allows attackers to escalate privileges via a crafted executable.EPSS 0.2%Apr 9, 2026
- High7.1Tmds.DBus provides .NET libraries for working with D-Bus from .NET.EPSS 0.1%Apr 9, 2026
- Medium6.5Incorrect security UI in Permissions in Google Chrome on Windows prior to 147.0.7727.55 allowed a remote attacker to perform domain spoofing via a crafted HTML page.EPSS 0.3%Apr 8, 2026
- Critical9.8A heap-based buffer overflow vulnerability exists in the lossless_jpeg_load_raw functionality of LibRaw Commit 0b56545 and Commit d20315b.EPSS 1.4%Apr 7, 2026
- Medium6.1SymCrypt is the core cryptographic function library currently used by Windows.EPSS 0.3%Apr 6, 2026
- Critical9.8Server-side request forgery (ssrf) in Microsoft Bing allows an unauthorized attacker to elevate privileges over a network.EPSS 0.9%Apr 3, 2026
- Critical9.6The Stackfield Desktop App before 1.10.2 for macOS and Windows contains a path traversal vulnerability in certain decryption functionality when processing the filePath property.EPSS 0.6%Apr 3, 2026
- Medium5.6Incorrect Default Permissions vulnerability in AIRBUS PSS TETRA Connectivity Server on Windows Server OS allows Privilege Abuse.EPSS 0.1%Apr 3, 2026
- Critical9.8Server-side request forgery (ssrf) in Azure Databricks allows an unauthorized attacker to elevate privileges over a network.EPSS 0.9%Apr 3, 2026
- Critical9.8Improper authorization in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network.EPSS 0.9%Apr 3, 2026
- Critical9.8Improper authorization in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network.EPSS 0.9%Apr 3, 2026
- High7.5Missing authentication for critical function in Azure MCP Server allows an unauthorized attacker to disclose information over a network.EPSS 1.0%Apr 3, 2026
- High7.5Improper authentication in Azure SRE Agent allows an unauthorized attacker to disclose information over a network.EPSS 1.1%Apr 3, 2026
- High8.8Server-side request forgery (ssrf) in Azure Custom Locations Resource Provider (RP) allows an authorized attacker to elevate privileges over a network.EPSS 0.7%Apr 3, 2026
- High7.0Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune.EPSS 0.2%Apr 1, 2026
- Medium6.9OpenClaw before 2026.3.22 contains a path traversal vulnerability in Windows media loaders that accepts remote-host file URLs and UNC-style paths before local-path validation.EPSS 0.5%Apr 1, 2026
- Medium6.5XML Notepad is a Windows program that provides a simple intuitive User Interface for browsing and editing XML documents.EPSS 1.4%Mar 31, 2026
- High8.6A security audit identified a privilege escalation vulnerability in Operations Agent(<=OA 12.29) on Windows.EPSS 0.1%Mar 31, 2026
- Medium5.3An incorrect startup configuration of affected versions of Zscaler Client Connector on Windows may cause a limited amount of traffic from being inspected under rare circumstances.EPSS 0.2%Mar 31, 2026
- Low2.3OpenClaw before 2026.3.8 contains a sender allowlist bypass vulnerability in its Microsoft Teams plugin that allows unauthorized senders to bypass intended authorization checks.EPSS 0.3%Mar 31, 2026
- UnknownMicrosoft .NET Framework Improper Input ValidationKEVEPSS 76.7%Mar 31, 2026