Latest vulnerabilities
Every new CVE with its exploitation status, public exploits and fixes — from more than 20 public sources, updated hourly.
- Tracked
- 409,348
- Last 24h
- 687
- Critical, 7 days
- 356
- Known exploited
- 1,779
97,596 results · Clear filters · Feed
-
High 7.8
Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability
Double free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability
Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.
-
High 8.8
Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.
-
High 8.8
Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.
-
High 8.8
Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.
-
High 7.0
Volume Shadow Copy Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Volume Shadow Copy allows an authorized attacker to elevate privileges locally.
-
High 7.5
Windows File Server Resource Management Service Elevation of Privilege Vulnerability
Out-of-bounds read in Windows File Server Resource Management Service allows an unauthorized attacker to elevate privileges over a network.
-
High 7.4
Visual Studio Code Information Disclosure Vulnerability
Missing authorization in Visual Studio Code allows an unauthorized attacker to disclose information over a network.
-
High 7.5
Microsoft Teams for Android Spoofing Vulnerability
Origin validation error in Microsoft Teams for Android allows an unauthorized attacker to perform spoofing over a network.
-
High 7.0
Windows Network Connection Broker Elevation of Privilege Vulnerability
Use after free in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally.
-
High 8.8
Visual Studio Remote Code Execution Vulnerability
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
-
High 7.5
ASP.NET Core Security Feature Bypass Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in ASP.NET Core allows an authorized attacker to elevate privileges locally.
-
High 8.8
Visual Studio Remote Code Execution Vulnerability
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
-
High 7.5
.NET Elevation of Privilege Vulnerability
Time-of-check time-of-use (toctou) race condition in .NET allows an authorized attacker to elevate privileges locally.
-
High 8.8
Visual Studio Remote Code Execution Vulnerability
Stack-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
-
High 7.5
ASP.NET Core Denial of Service Vulnerability
Uncontrolled resource consumption in ASP.NET Core allows an unauthorized attacker to deny service over a network.
-
High 8.8
Visual Studio Remote Code Execution Vulnerability
Deserialization of untrusted data in Visual Studio allows an unauthorized attacker to execute code over a network.
-
High 7.5
ASP.NET Core Denial of Service Vulnerability
Missing release of memory after effective lifetime in ASP.NET Core allows an unauthorized attacker to deny service over a network.
-
High 7.5
ASP.NET Core Denial of Service Vulnerability
Uncontrolled resource consumption in ASP.NET Core allows an unauthorized attacker to deny service over a network.
-
High 8.8
Windows DHCP Client Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows DHCP Client allows an unauthorized attacker to elevate privileges over an adjacent network.
-
High 7.8
Windows Hyper-V Elevation of Privilege Vulnerability
Time-of-check time-of-use (toctou) race condition in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
-
High 8.1
Windows Network Address Translation (NAT) Remote Code Execution Vulnerability
Use after free in Windows Network Address Translation (NAT) allows an unauthorized attacker to execute code over a network.
-
High 7.0
Windows Hyper-V Elevation of Privilege Vulnerability
Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
-
High 7.5
Windows Hyper-V Elevation of Privilege Vulnerability
Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Hyper-V Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
-
High 7.5
Windows TCP/IP Remote Code Execution Vulnerability
Use after free in Windows TCP/IP allows an unauthorized attacker to execute code over an adjacent network.
-
High 7.8
Windows NTFS Remote Code Execution Vulnerability
Null pointer dereference in Windows NTFS allows an unauthorized attacker to execute code locally.
-
High 7.5
Windows DNS Remote Code Execution Vulnerability
Use of uninitialized resource in Windows DNS allows an unauthorized attacker to execute code over an adjacent network.
-
High 7.8
Windows Installer Elevation of Privilege Vulnerability
Integer overflow or wraparound in Windows Installer allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
Improper authentication in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Security Center Elevation of Privilege Vulnerability
Use after free in Windows Security Center allows an authorized attacker to elevate privileges locally.
-
High 8.8
Remote Desktop Services Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to execute code over a network.
-
High 7.5
Windows Secure Socket Tunneling Protocol (SSTP) Denial of Service Vulnerability
Uncontrolled resource consumption in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to deny service over a network.
-
High 7.0
Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Point-to-Point Protocol over Ethernet (PPPoE) Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Point-to-Point Protocol over Ethernet (PPPoE) allows an authorized attacker to elevate privileges locally.
-
High 8.8
Windows Storage Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Storage allows an unauthorized attacker to execute code over a network.
-
High 7.0
Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
Use after free in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.
-
High 7.5
Windows SMB Server Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB Server Network Transport Driver (srvnet.sys) allows an authorized attacker to execute code over a network.
-
High 7.0
Desktop Window Manager Elevation of Privilege Vulnerability
Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability
Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.