Latest vulnerabilities
Every new CVE with its exploitation status, public exploits and fixes — from nearly 30 public sources, updated hourly.
- Tracked
- 409,492
- Last 24h
- 549
- Critical, 7 days
- 333
- Known exploited
- 1,779
108,005 results · Clear filters · Feed
-
Medium 6.5
Microsoft Office Excel Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
-
Medium 6.5
Microsoft Office Excel Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
-
Medium 6.5
Microsoft Office SharePoint Information Disclosure Vulnerability
Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
-
Medium 6.5
Microsoft Office SharePoint Information Disclosure Vulnerability
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
-
Medium 6.5
Microsoft Office Word Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
-
Medium 6.5
Microsoft Office Word Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
-
Medium 5.9
ASP.NET Core Denial of Service Vulnerability
Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to deny service over a network.
-
Medium 6.7
.NET Elevation of Privilege Vulnerability
Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.
-
Medium 6.5
.NET Framework Security Feature Bypass Vulnerability
Improper certificate validation in .NET Framework allows an unauthorized attacker to bypass a security feature over a network.
-
Medium 4.2
Windows Resilient File System (ReFS) Security Feature Bypass Vulnerability
Stack-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker to bypass a security feature with a physical attack.
-
Medium 5.5
Windows Remote Access Connection Manager Information Disclosure Vulnerability
Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to disclose information locally.
-
Medium 5.5
Microsoft Windows Media Foundation Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Windows Media Foundation allows an unauthorized attacker to disclose information locally.
-
Medium 5.5
Windows IP Over USB Service Information Disclosure Vulnerability
Out-of-bounds read in Windows IP Over USB Service allows an authorized attacker to disclose information locally.
-
Medium 6.5
Windows Client for NFS Information Disclosure Vulnerability
Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information over a network.
-
Medium 6.5
Windows Client for NFS Information Disclosure Vulnerability
Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information over a network.
-
Medium 5.9
Active Directory Federation Services (AD FS) Security Feature Bypass Vulnerability
Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to bypass a security feature over a network.
-
Medium 5.9
Active Directory Federation Services (AD FS) Security Feature Bypass Vulnerability
Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to bypass a security feature over a network.
-
Medium 6.7
Windows Storage Spaces Controller Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.
-
Medium 5.5
Windows Key Storage Provider Information Disclosure Vulnerability
Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally.
-
Medium 6.5
WebDAV Information Disclosure Vulnerability
Files or directories accessible to external parties in WebDAV allows an authorized attacker to disclose information over a network.
-
Medium 5.9
Azure Key Vault Information Disclosure Vulnerability
Origin validation error in Azure Key Vault allows an unauthorized attacker to disclose information over a network.
-
Medium 5.9
Windows Failover Cluster Denial of Service Vulnerability
Uncaught exception in Windows Failover Cluster allows an unauthorized attacker to deny service over a network.
-
Medium 6.5
WebDAV Security Feature Bypass Vulnerability
Missing authorization in WebDAV allows an authorized attacker to bypass a security feature over a network.
-
Medium 5.5
Windows USB Driver Information Disclosure Vulnerability
Buffer over-read in Windows USB Driver allows an authorized attacker to disclose information locally.
-
Medium 5.3
Windows Kernel Security Feature Bypass Vulnerability
Weak authentication in Windows Kernel allows an authorized attacker to bypass a security feature over a network.
-
Medium 5.5
Windows Broadcast DVR User Service Information Disclosure Vulnerability
Improper access control in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally.
-
Medium 6.2
Azure Active Directory Information Disclosure Vulnerability
Exposure of private personal information to an unauthorized actor in Azure Active Directory allows an unauthorized attacker to disclose information locally.
-
Medium 6.5
Windows CD-ROM Driver Elevation of Privilege Vulnerability
Buffer over-read in Windows CD-ROM Driver allows an unauthorized attacker to elevate privileges over a network.
-
Medium 5.5
Windows Fast FAT File System Driver Information Disclosure Vulnerability
Out-of-bounds read in Windows Fast FAT Driver allows an unauthorized attacker to disclose information locally.
-
Medium 5.5
Windows Container Isolation FS Filter Driver Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows Container Isolation FS Filter Driver allows an authorized attacker to elevate privileges locally.
-
Medium 6.5
Windows DNS Server Information Disclosure Vulnerability
Out-of-bounds read in DNS Server allows an unauthorized attacker to disclose information over a network.
-
Medium 5.5
Windows Mobile Device Management Tampering Vulnerability
Insufficient granularity of access control in Windows Mobile Device Management allows an authorized attacker to perform tampering locally.
-
Medium 6.5
Windows Kernel Denial of Service Vulnerability
Untrusted pointer dereference in Windows Kernel allows an authorized attacker to deny service over a network.
-
Medium 6.5
Azure DevOps Information Disclosure Vulnerability
Origin validation error in Azure DevOps allows an unauthorized attacker to disclose information over a network.
-
Medium 5.5
Windows Encrypting File System (EFS) Tampering Vulnerability
Improper authorization in Windows Encrypting File System (EFS) allows an authorized attacker to perform tampering locally.
-
Medium 5.5
Windows CD-ROM Driver Information Disclosure Vulnerability
Buffer over-read in Windows CD-ROM Driver allows an authorized attacker to disclose information locally.
-
Medium 5.5
Microsoft Digest Authentication Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Digest Authentication allows an authorized attacker to disclose information locally.
-
Medium 5.5
Windows DHCP Server Security Feature Bypass Vulnerability
Improper authentication in Windows DHCP Server allows an authorized attacker to bypass a security feature locally.
-
Medium 6.4
Windows Security Center Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Security Center allows an authorized attacker to elevate privileges locally.
-
Medium 6.5
Windows Message Queuing Queue Manager Denial of Service Vulnerability
Null pointer dereference in Windows Message Queuing Queue Manager allows an authorized attacker to deny service over a network.