Latest vulnerabilities
Every new CVE with its exploitation status, public exploits and fixes — from nearly 30 public sources, updated hourly.
- Tracked
- 409,792
- Last 24h
- 344
- Critical, 7 days
- 342
- Known exploited
- 1,779
97,885 results · Clear filters · Feed
-
High 8.8
Microsoft Office SharePoint Remote Code Execution Vulnerability
Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
-
High 7.8
Windows Bind Filter Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
-
High 8.8
Windows Background Intelligent Transfer Service (BITS) Remote Code Execution Vulnerability
Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.
-
High 8.8
Windows Active Directory Domain Services Remote Code Execution Vulnerability
Out-of-bounds write in Active Directory Domain Services allows an authorized attacker to execute code over a network.
-
High 7.0
Microsoft Windows Search Component Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
-
High 8.1
Windows Background Intelligent Transfer Service (BITS) Remote Code Execution Vulnerability
Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.
-
High 7.8
Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.
-
High 7.8
Microsoft PowerShell Remote Code Execution Vulnerability
Integer overflow or wraparound in Windows PowerShell allows an authorized attacker to execute code locally.
-
High 7.8
Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Installer Elevation of Privilege Vulnerability
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
-
High 7.8
Microsoft Input Method Editor (IME) Elevation of Privilege Vulnerability
Weak authentication in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Management Instrumentation Elevation of Privilege Vulnerability
Deserialization of untrusted data in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.
-
High 8.8
Microsoft OpenSSH for Windows Remote Code Execution Vulnerability
Heap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.
-
High 7.8
Windows Installer Elevation of Privilege Vulnerability
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows DCOM Server Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DCOM Server allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability
Use after free in Windows Local Security Authority (LSA) allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Installer Elevation of Privilege Vulnerability
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Installer Elevation of Privilege Vulnerability
Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
-
High 8.0
Microsoft Office Graphics Elevation of Privilege Vulnerability
Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges over a network.
-
High 7.0
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
-
High 7.8
Microsoft Windows Search Component Elevation of Privilege Vulnerability
Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows PCI Bus Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows PCI Bus Driver allows an authorized attacker to elevate privileges locally.
-
High 7.5
Azure HDInsight Information Disclosure Vulnerability
Exposure of sensitive information to an unauthorized actor in Azure HDInsight allows an unauthorized attacker to disclose information over a network.
-
High 7.0
Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability
Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.
-
High 7.8
Python Elevation of Privilege Vulnerability
Improper privilege management in Python allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows BitLocker Elevation of Privilege Vulnerability
Time-of-check time-of-use (toctou) race condition in Windows BitLocker allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.
-
High 7.1
Internet Connection Sharing (ICS) Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Internet Connection Sharing (ICS) allows an authorized attacker to execute code over an adjacent network.
-
High 7.8
Windows SmartScreen Elevation of Privilege Vulnerability
Use after free in Windows SmartScreen allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows DWM Core Library Elevation of Privilege Vulnerability
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Message Queuing Queue Manager Elevation of Privilege Vulnerability
Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to elevate privileges locally.
-
High 7.8
Clipboard User Service Elevation of Privilege Vulnerability
Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.
-
High 7.8
Clipboard User Service Elevation of Privilege Vulnerability
Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows DWM Core Library Elevation of Privilege Vulnerability
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows DWM Core Library Elevation of Privilege Vulnerability
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows AppX Deployment Service Elevation of Privilege Vulnerability
Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Kernel Elevation of Privilege Vulnerability
Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally.
-
High 7.0
Web Account Manager Elevation of Privilege Vulnerability
Use after free in Windows Web Account Manager allows an authorized attacker to elevate privileges locally.