Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Low2.3FreeRDP 3.30.0 before 3.32.0 Heap Over-Read via Windows cliprdr FILECONTENTS_SIZEOct 16, 2026
- Medium6.0Improper certificate validation in Cato Client tunnel handshakeEPSS 0.1%Oct 15, 2026
- High7.5In Omada Controller MSP mode, the user-confirmation endpoint fails to enforce the required permission check.EPSS 0.4%Oct 14, 2026
- Medium4.3A type confusion vulnerability in Palo Alto Networks GlobalProtect™ app on Windows enables a local user with low privileges to cause a denial of service (DoS) condition.EPSS 0.1%Oct 14, 2026
- Critical9.2Beganovich snappdf from 1.1.0 before 6.1.0 contains an OS command injection vulnerability on Windows that allows attackers to run commands by influencing the rendered URL.EPSS 2.1%Oct 14, 2026
- Medium6.5Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.EPSS 0.6%Oct 13, 2026
- Medium5.3Weak authentication in Windows Kernel allows an authorized attacker to bypass a security feature over a network.Oct 13, 2026
- Medium5.5Improper verification of cryptographic signature in Windows Update Stack allows an authorized attacker to perform spoofing locally.EPSS 0.2%Oct 13, 2026
- Medium5.5Insufficient verification of data authenticity in Windows DHCP Server allows an authorized attacker to bypass a security feature locally.EPSS 0.3%Oct 13, 2026
- Medium6.8Integer overflow or wraparound in Windows Kernel Mode Driver allows an unauthorized attacker to elevate privileges with a physical attack.Oct 13, 2026
- Medium6.4Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Security Center allows an authorized attacker to elevate privileges locally.Oct 13, 2026
- Critical9.8Heap-based buffer overflow in Windows Rich Text Edit Control allows an unauthorized attacker to execute code over a network.Oct 13, 2026
- High7.5Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network.Oct 13, 2026
- High7.5Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to deny service over a network.Oct 13, 2026
- High8.1Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.Oct 13, 2026
- High8.4Rovr through 0.10.3 on Windows contains an OS command injection vulnerability that allows attackers to execute commands by crafting malicious file names.EPSS 1.1%Oct 13, 2026
- High8.8Heap-based buffer overflow in Windows Media Video Decoder allows an unauthorized attacker to execute code over a network.EPSS 0.8%Oct 13, 2026
- Medium6.5Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.EPSS 0.7%Oct 13, 2026
- Medium6.5Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.EPSS 0.7%Oct 13, 2026
- Medium6.5Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.EPSS 0.7%Oct 13, 2026
- Medium6.5Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.EPSS 0.7%Oct 13, 2026
- Medium6.5Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.EPSS 0.7%Oct 13, 2026
- Medium6.5Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.EPSS 0.7%Oct 13, 2026
- Medium6.5Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.EPSS 0.7%Oct 13, 2026
- Medium6.5Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.EPSS 0.6%Oct 13, 2026
752 records · page 1 of 31
PreviousNext