Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8Heap-based buffer overflow in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.Check if you run itEPSS 1.34%May 13, 2025
- High8.8Heap-based buffer overflow in Windows Remote Desktop allows an unauthorized attacker to execute code over a network.Check if you run itEPSS 1.43%May 13, 2025
- High8.8Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network.Check if you run itEPSS 1.09%May 13, 2025
- Medium6.5Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.Check if you run itEPSS 1.53%May 13, 2025
- Medium6.5Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.Check if you run itEPSS 1.53%May 13, 2025
- Medium6.7External control of file name or path in Microsoft Defender for Endpoint allows an authorized attacker to elevate privileges locally.Check this weekEPSS 44.00%May 13, 2025
- High7.0conda-forge openssl-feedstock before 066e83c (2024-05-20), on Microsoft Windows, configures OpenSSL to use an OPENSSLDIR file path that can be written to by non-privilged local useCheck if you run itEPSS 0.23%May 13, 2025
- Medium4.3SAP GUI for Windows allows an unauthenticated attacker to exploit insecure obfuscation algorithms used by the GuiXT application to store user credentials.Check if you run itEPSS 0.18%May 13, 2025
- High7.8Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free VulnerabilityPatch nowKEVEPSS 1.82%May 13, 2025
- High7.8Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow VulnerabilityPatch nowKEVEPSS 2.33%May 13, 2025
- High7.8Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free VulnerabilityPatch nowKEVEPSS 1.42%May 13, 2025
- High7.8Microsoft Windows DWM Core Library Use-After-Free VulnerabilityPatch nowKEVEPSS 1.92%May 13, 2025
- High7.5Microsoft Windows Scripting Engine Type Confusion VulnerabilityPatch nowKEVEPSS 27.04%May 13, 2025
- High7.3A vulnerability was found in MTSoftware C-Lodop 6.6.1.1 on Windows.Check if you run itEPSS 0.34%May 11, 2025
- High7.3A vulnerability, which was classified as critical, has been found in Discord 1.0.9188 on Windows.Check if you run itEPSS 0.35%May 10, 2025
- High7.8Link Following Local Privilege Escalation Vulnerability in System Speedup Service in Avira Operations GmbH Avira Prime Version 1.1.96.2 on Windows 10 x64 allows local attackers toCheck this weekEPSS 22.00%May 9, 2025
- High7.8Link Following Local Privilege Escalation Vulnerability in TuneupSvc in Avast Cleanup Premium Version 24.2.16593.17810 on Windows 10 Pro x64 allows local attackers to escalate privCheck this weekEPSS 17.00%May 9, 2025
- High7.8Link Following Local Privilege Escalation Vulnerability in TuneUp Service in AVG TuneUp Version 23.4 (build 15592) on Windows 10 allows local attackers to escalate privileges and eCheck this weekEPSS 17.00%May 9, 2025
- High7.8Link Following Local Privilege Escalation Vulnerability in TuneupSvc.exe in AVG TuneUp 24.2.16593.9844 on Windows allows local attackers to escalate privileges and execute arbitrarCheck this weekEPSS 22.00%May 9, 2025
- High7.8Local Privilege Escalation in Avira.Spotlight.Service.exe in Avira Prime 1.1.96.2 on Windows 10 x64 allows local attackers to gain system-level privileges via arbitrary file deletiCheck this weekEPSS 23.00%May 9, 2025
- High7.8Link Following Local Privilege Escalation Vulnerability in NortonUtilitiesSvc in Norton Utilities Ultimate Version 24.2.16862.6344 on Windows 10 Pro x64 allows local attackers to eCheck this weekEPSS 17.00%May 9, 2025
- High8.7Deserialization of untrusted data in Microsoft Dataverse allows an authorized attacker to execute code over a network.Check if you run itEPSS 3.71%May 8, 2025
- Critical9.1Server-Side Request Forgery (SSRF) in Microsoft Power Apps allows an unauthorized attacker to disclose information over a networkCheck if you run itEPSS 1.99%May 8, 2025
- Critical10.0Authentication bypass by assumed-immutable data in Azure DevOps allows an unauthorized attacker to elevate privileges over a network.Check if you run itEPSS 1.77%May 8, 2025
- Critical9.9Improper authorization in Azure Automation allows an authorized attacker to elevate privileges over a network.Check if you run itEPSS 1.67%May 8, 2025