Latest vulnerabilities
Every new CVE with its exploitation status, public exploits and fixes — from more than 20 public sources, updated hourly.
- Tracked
- 408,988
- Last 24h
- 1,889
- Critical, 7 days
- 353
- Known exploited
- 1,779
97,451 results · Clear filters · Feed
-
High 8.3
Visual Studio Code Remote Code Execution Vulnerability
Incorrect authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network.
-
High 7.0
Windows HTTP.sys Elevation of Privilege Vulnerability
Double free in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.
-
High 7.8
Microsoft Windows App Store Elevation of Privilege Vulnerability
Untrusted search path in Microsoft Windows App Store allows an authorized attacker to elevate privileges locally.
-
High 7.5
ASP.NET Core Denial of Service Vulnerability
Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to deny service over a network.
-
High 7.5
ASP.NET Core Denial of Service Vulnerability
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.
-
High 7.5
.NET Denial of Service Vulnerability
Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.
-
High 7.5
ASP.NET Core Denial of Service Vulnerability
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.
-
High 8.8
Visual Studio Remote Code Execution Vulnerability
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
-
High 7.5
Microsoft SQL Server Elevation of Privilege Vulnerability
Exposed dangerous method or function in SQL Server allows an authorized attacker to elevate privileges over a network.
-
High 8.8
Microsoft Exchange Server Remote Code Execution Vulnerability
Improper input validation in Microsoft Exchange Server allows an authorized attacker to execute code over a network.
-
High 7.1
Microsoft Exchange Server Spoofing Vulnerability
Improper access control in Microsoft Exchange Server allows an authorized attacker to perform spoofing over a network.
-
High 8.8
Microsoft Exchange Server Elevation of Privilege Vulnerability
Reliance on untrusted inputs in a security decision in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
-
High 7.2
Microsoft Exchange Server Elevation of Privilege Vulnerability
Weak authentication in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
-
High 7.5
Microsoft Exchange Server Denial of Service Vulnerability
Inefficient algorithmic complexity in Microsoft Exchange Server allows an unauthorized attacker to deny service over a network.
-
High 8.8
Microsoft Exchange Server Elevation of Privilege Vulnerability
Authorization bypass through user-controlled key in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
-
High 7.2
Microsoft Exchange Server Elevation of Privilege Vulnerability
External control of file name or path in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
-
High 7.8
Windows Graphics Kernel Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
-
High 8.8
Microsoft Exchange Server Remote Code Execution Vulnerability
Improper control of generation of code ('code injection') in Microsoft Exchange Server allows an authorized attacker to execute code over a network.
-
High 8.8
Windows Network Connected Devices Auto-Setup Service Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Network Connected Devices Auto-Setup Service allows an unauthorized attacker to execute code over an adjacent network.
-
High 7.8
Windows PowerShell Remote Code Execution Vulnerability
Improper control of generation of code ('code injection') in Windows PowerShell allows an unauthorized attacker to execute code locally.
-
High 8.8
Microsoft PowerShell Security Feature Bypass Vulnerability
Execution with unnecessary privileges in Windows PowerShell allows an authorized attacker to bypass a security feature locally.
-
High 7.8
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
-
High 7.0
PowerShell Elevation of Privilege Vulnerability
Improper link resolution before file access ('link following') in Windows PowerShell allows an authorized attacker to elevate privileges locally.
-
High 7.8
Visual Studio Code Security Feature Bypass Vulnerability
Improper control of generation of code ('code injection') in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.
-
High 7.5
Remote Desktop Gateway Service Elevation of Privilege Vulnerability
Use after free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges over a network.
-
High 7.5
Aspire Elevation of Privilege Vulnerability
Insertion of sensitive information into sent data in .NET Aspire allows an authorized attacker to elevate privileges locally.
-
High 7.8
Azure NFS mount helper (aznfs) Elevation of Privilege Vulnerability
Untrusted search path in Azure NFS mount helper (aznfs) allows an authorized attacker to elevate privileges locally.
-
High 8.8
Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft Office PowerPoint Remote Code Execution Vulnerability
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft Office Word Remote Code Execution Vulnerability
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft Office PowerPoint Remote Code Execution Vulnerability
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.