Latest vulnerabilities
Every new CVE with its exploitation status, public exploits and fixes — from more than 20 public sources, updated hourly.
- Tracked
- 409,255
- Last 24h
- 595
- Critical, 7 days
- 357
- Known exploited
- 1,779
97,592 results · Clear filters · Feed
-
High 8.8
Remote Desktop Client Tampering Vulnerability
Missing authentication for critical function in Remote Desktop Client allows an unauthorized attacker to perform tampering over a network.
-
High 7.0
Windows Overlay Filter Elevation of Privilege Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Text Services Framework Elevation of Privilege Vulnerability
Incorrect authorization in Windows Text Services Framework allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Network Connection Broker Elevation of Privilege Vulnerability
Improper authorization in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Microsoft Account Sign-in Assistant Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Microsoft Account Sign-in Assistant allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Shell Elevation of Privilege Vulnerability
Double free in Windows Shell allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Backup Engine Elevation of Privilege Vulnerability
Use after free in Windows Backup Engine allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Broadcast DVR User Service Elevation of Privilege Vulnerability
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Installer Elevation of Privilege Vulnerability
Double free in Windows Installer allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Broadcast DVR User Service Elevation of Privilege Vulnerability
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Broadcast DVR User Service Elevation of Privilege Vulnerability
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Kernel Transaction Manager Elevation of Privilege Vulnerability
Use after free in Kernel Transaction Manager allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Installer Elevation of Privilege Vulnerability
Improper access control in Windows Installer allows an authorized attacker to elevate privileges locally.
-
High 8.8
Windows Storage Spaces Controller Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Storage Spaces Controller allows an unauthorized attacker to elevate privileges over a network.
-
High 7.8
Windows Credential Manager Elevation of Privilege Vulnerability
Stack-based buffer overflow in Windows Credential Manager allows an authorized attacker to elevate privileges locally.
-
High 7.8
Remote Desktop Client Remote Code Execution Vulnerability
Heap-based buffer overflow in Remote Desktop Client allows an authorized attacker to execute code locally.
-
High 7.8
Windows Hyper-V Elevation of Privilege Vulnerability
Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
-
High 7.0
Quality Windows Audio/Video Experience (QWAVE) service Elevation of Privilege Vulnerability
Use after free in Quality Windows Audio/Video Experience (QWAVE) service allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Storage Elevation of Privilege Vulnerability
Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.
-
High 7.0
Quality Windows Audio/Video Experience (QWAVE) service Elevation of Privilege Vulnerability
Use after free in Quality Windows Audio/Video Experience (QWAVE) service allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
Use after free in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.
-
High 8.8
Visual Studio Code Security Feature Bypass Vulnerability
User interface (ui) misrepresentation of critical information in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.
-
High 8.8
Microsoft Office SharePoint Elevation of Privilege Vulnerability
Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
-
High 8.0
Windows Admin Center Elevation of Privilege Vulnerability
Improper authorization in Windows Admin Center allows an authorized attacker to elevate privileges over a network.
-
High 8.8
Microsoft Office SharePoint Remote Code Execution Vulnerability
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
-
High 8.8
Microsoft Office Excel Remote Code Execution Vulnerability
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
-
High 7.5
Microsoft Office Word Remote Code Execution Vulnerability
Use of uninitialized resource in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft Office Excel Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
-
High 7.5
Microsoft Office Excel Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft Office Excel Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft Office Excel Remote Code Execution Vulnerability
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft Office Outlook Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft Office Outlook Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft Office Outlook Remote Code Execution Vulnerability
Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft Office Outlook Remote Code Execution Vulnerability
Untrusted pointer dereference in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
-
High 7.5
Microsoft Office Outlook Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft Office Outlook Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft Office Outlook Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
-
High 7.5
Microsoft Office Outlook Remote Code Execution Vulnerability
Integer overflow or wraparound in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.