Catalog

Vulnerability catalog

Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.

SearchRecord typeSeveritySourceStackWeaknessSort

Known exploited only

Reset

High7.8Microsoft Win32k Privilege Escalation VulnerabilityVuln · CVE-2022-21882 · Microsoft · Win32k · CISA KEV · CVE.org · FIRST EPSS · Microsoft, WindowsPatch nowKEVEPSS 59.20%Jan 11, 2022
High7.8Microsoft Windows Privilege Escalation VulnerabilityVuln · CVE-2021-43226 · Microsoft · Windows · CISA KEV · CVE.org · FIRST EPSS · Microsoft, WindowsPatch nowKEVEPSS 3.28%Dec 15, 2021
UnknownWindows WalletService Privilege EscalationVuln · CVE-2021-26885 · Microsoft · Windows · CVE.org · FIRST EPSS · VulnCheck KEV · Microsoft, WindowsPatch nowKEVEPSS 3.49%Dec 15, 2021
UnknownMicrosoft Windows Untrusted Search PathVuln · CVE-2015-0096 · Microsoft · Windows · CVE.org · FIRST EPSS · VulnCheck KEV · Microsoft, WindowsPatch nowKEVEPSS 70.96%Dec 15, 2021
UnknownMicrosoft Windows Improper Input ValidationVuln · CVE-2010-3338 · Microsoft · Windows · CVE.org · FIRST EPSS · VulnCheck KEV · Microsoft, WindowsPatch nowKEVEPSS 23.07%Dec 15, 2021
UnknownMicrosoft Windows Win32k Keyboard Layout Privilege EscalationVuln · CVE-2010-2743 · Microsoft · Windows · CVE.org · FIRST EPSS · VulnCheck KEV · Microsoft, WindowsPatch nowKEVEPSS 14.56%Dec 15, 2021
High7.1Microsoft Windows AppX Installer Spoofing VulnerabilityVuln · CVE-2021-43890 · Microsoft · Windows · CISA KEV · CVE.org · FIRST EPSS · Microsoft, WindowsPatch nowKEVEPSS 11.29%Dec 14, 2021
UnknownNovell Client for Windows NICM.SYS Local Privilege Escalation VulnerabilityVuln · CVE-2013-3956 · novell · client · CVE.org · FIRST EPSS · VulnCheck KEV · Microsoft, WindowsPatch nowKEVEPSS 7.80%Dec 13, 2021
Critical9.8Ajax.NET Professional Deserialization of Untrusted Data VulnerabilityVuln · CVE-2021-23758 · Ajax.NET Professional · Ajax.NET Professional · CISA KEV · CVE.org · FIRST EPSS · MicrosoftPatch nowKEVEPSS 82.58%Dec 3, 2021
High7.5Microsoft Active Directory Domain Services Privilege Escalation VulnerabilityVuln · CVE-2021-42287 · Microsoft · Active Directory · CISA KEV · CVE.org · FIRST EPSS · Microsoft, WindowsPatch nowKEVEPSS 77.17%Nov 9, 2021
High7.5Microsoft Active Directory Domain Services Privilege Escalation VulnerabilityVuln · CVE-2021-42278 · Microsoft · Active Directory · CISA KEV · CVE.org · FIRST EPSS · Microsoft, WindowsPatch nowKEVEPSS 73.30%Nov 9, 2021
Medium5.5Microsoft Windows Installer Privilege Escalation VulnerabilityVuln · CVE-2021-41379 · Microsoft · Windows · CISA KEV · CVE.org · FIRST EPSS · Microsoft, WindowsPatch nowKEVEPSS 19.45%Nov 9, 2021
High8.8Microsoft Exchange Server Remote Code Execution VulnerabilityVuln · CVE-2021-42321 · Microsoft · Exchange Server · CISA KEV · CVE.org · FIRST EPSS · Exchange, MicrosoftPatch nowKEVEPSS 91.74%Nov 9, 2021
High7.8Microsoft Excel Security Feature BypassVuln · CVE-2021-42292 · Microsoft · Office · CISA KEV · CVE.org · FIRST EPSS · Microsoft, Microsoft 365Patch nowKEVEPSS 43.00%Nov 9, 2021
High7.8Microsoft Win32k Privilege Escalation VulnerabilityVuln · CVE-2021-41357 · Microsoft · Win32k · CISA KEV · CVE.org · FIRST EPSS · Microsoft, WindowsPatch nowKEVEPSS 1.58%Oct 12, 2021
High7.8Microsoft Win32k Privilege Escalation VulnerabilityVuln · CVE-2021-40450 · Microsoft · Win32k · CISA KEV · CVE.org · FIRST EPSS · Microsoft, WindowsPatch nowKEVEPSS 1.58%Oct 12, 2021
High7.8Microsoft Windows Win32k Privilege Escalation VulnerabilityVuln · CVE-2021-40449 · Microsoft · Windows · CISA KEV · CVE.org · FIRST EPSS · Microsoft, WindowsPatch nowKEVEPSS 74.13%Oct 12, 2021
High7.0Microsoft Open Management Infrastructure (OMI) Privilege Escalation VulnerabilityVuln · CVE-2021-38649 · Microsoft · Open Management Infrastructure (OMI) · CISA KEV · CVE.org · FIRST EPSS · Azure, MicrosoftPatch nowKEVEPSS 2.89%Sep 15, 2021
High7.8Microsoft Open Management Infrastructure (OMI) Privilege Escalation VulnerabilityVuln · CVE-2021-38648 · Microsoft · Open Management Infrastructure (OMI) · CISA KEV · CVE.org · FIRST EPSS · Azure, MicrosoftPatch nowKEVEPSS 11.42%Sep 15, 2021
Critical9.8Microsoft Open Management Infrastructure (OMI) Remote Code Execution VulnerabilityVuln · CVE-2021-38647 · Microsoft · Open Management Infrastructure (OMI) · CISA KEV · CVE.org · FIRST EPSS · Azure, MicrosoftPatch nowKEVEPSS 99.93%Sep 15, 2021
High7.8Microsoft Office Access Connectivity Engine Remote Code Execution VulnerabilityVuln · CVE-2021-38646 · Microsoft · Office · CISA KEV · CVE.org · FIRST EPSS · Microsoft, Microsoft 365Patch nowKEVEPSS 7.99%Sep 15, 2021
High7.8Microsoft Open Management Infrastructure (OMI) Privilege Escalation VulnerabilityVuln · CVE-2021-38645 · Microsoft · Open Management Infrastructure (OMI) · CISA KEV · CVE.org · FIRST EPSS · Azure, MicrosoftPatch nowKEVEPSS 2.73%Sep 15, 2021
High7.8Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation VulnerabilityVuln · CVE-2021-36955 · Microsoft · Windows · CISA KEV · CVE.org · FIRST EPSS · Microsoft, WindowsPatch nowKEVEPSS 4.07%Sep 15, 2021
High8.8Microsoft MSHTML Remote Code Execution VulnerabilityVuln · CVE-2021-40444 · Microsoft · MSHTML · CISA KEV · CVE.org · FIRST EPSS · Microsoft, WindowsPatch nowKEVEPSS 97.84%Sep 7, 2021
UnknownWindows Remote Desktop Protocol (RDP) Information DisclosureVuln · CVE-2020-16896 · Microsoft · Windows · CVE.org · FIRST EPSS · VulnCheck KEV · Microsoft, WindowsPatch nowKEVEPSS 12.60%Aug 19, 2021