Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium6.9Authorization bypass through User-Controlled key vulnerability in HYPR Passwordless on Windows allows Privilege Escalation.EPSS 0.1%Oct 13, 2026
- Critical9.9Legacy Update is a tool for activating and installing updates on legacy Windows PCs.EPSS 0.2%Oct 13, 2026
- Medium5.8Out-of-bounds read vulnerability in Citirx Citrix Workspace app for Windows.EPSS 0.1%Oct 13, 2026
- Medium6.8Out-of-bounds write vulnerability in Citrix Workspace app for Windows.EPSS 0.1%Oct 13, 2026
- Medium5.5Privilege elevation in Installer in Google Chrome on on Windows prior to 155.0.8059.79 allowed a local attacker to obtain sensitive information via a local program.EPSS 0.1%Oct 13, 2026
- Medium6.0The Okta Credential Provider for Windows does not validate a serialized credential buffer before interpreting it as a Kerberos logon structure.EPSS 0.1%Oct 13, 2026
- Medium6.5Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.EPSS 0.7%Oct 13, 2026
- Medium6.5Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.EPSS 0.7%Oct 13, 2026
- Medium6.8Integer overflow or wraparound in Windows Kernel Mode Driver allows an unauthorized attacker to elevate privileges with a physical attack.Oct 13, 2026
- Medium6.4Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Security Center allows an authorized attacker to elevate privileges locally.Oct 13, 2026
- High7.5Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network.Oct 13, 2026
- High7.5Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to deny service over a network.Oct 13, 2026
- High8.1Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.Oct 13, 2026
- Critical9.8Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.Oct 13, 2026
- Critical9.8Out-of-bounds write in Windows iSCSI allows an unauthorized attacker to execute code over a network.Oct 13, 2026
- High8.8Affected Microsoft products: Windows Server 2019, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019 (Server Core installation), Windows 10 Version 1809 for 32-bitEPSS 0.3%Oct 13, 2026
- High8.8Windows SmartScreen Security Feature Bypass VulnerabilityEPSS 0.9%Oct 13, 2026
- High7.8Microsoft Windows Search Component Elevation of Privilege VulnerabilityEPSS 0.3%Oct 13, 2026
- High7.0Windows Backup Engine Elevation of Privilege VulnerabilityEPSS 0.3%Oct 13, 2026
- High7.0Windows Autopilot Elevation of Privilege VulnerabilityEPSS 0.3%Oct 13, 2026
- High7.8Windows Modern Device Management (MDM) Elevation of Privilege VulnerabilityEPSS 0.3%Oct 13, 2026
- High7.0Windows Kerberos Elevation of Privilege VulnerabilityEPSS 0.3%Oct 13, 2026
- High7.5Active Directory Federation Services (AD FS) Spoofing VulnerabilityEPSS 0.7%Oct 13, 2026
- High7.8Affected Microsoft products: Windows 11 Version 26H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for x64-based Systems, WindowsEPSS 0.3%Oct 13, 2026
- Medium6.5Affected Microsoft products: Windows Server 2016 (Server Core installation), Windows Server 2019 (Server Core installation), Windows Server 2012, Windows 10 Version 21…EPSS 1.0%Oct 13, 2026